{ "diagnostics" : { "agentic.tool_poisoning_instruction.text.regex.budget_timeout_ms" : "1500", "agentic.tool_poisoning_instruction.text.regex.elapsed_ms" : "0.342", "agentic.tool_poisoning_instruction.text.semantic_intent_match.budget_timeout_ms" : "1500", "agentic.tool_poisoning_instruction.text.semantic_intent_match.elapsed_ms" : "82.041", "compatibility.isCompatible" : "true", "cross_artifact.split_instruction.text.cross_artifact_fragmentation.budget_timeout_ms" : "1500", "cross_artifact.split_instruction.text.cross_artifact_fragmentation.correlation_count" : "0", "cross_artifact.split_instruction.text.cross_artifact_fragmentation.elapsed_ms" : "0.636", "cross_artifact.split_instruction.text.cross_artifact_fragmentation.inspected_artifacts" : "7", "cross_artifact.split_instruction.text.cross_artifact_fragmentation.inspected_bytes" : "685", "cross_artifact.split_instruction.text.cross_artifact_fragmentation.limit_reached" : "false", "cross_artifact.split_instruction.text.cross_artifact_fragmentation.search_state_count" : "0", "derived.artifactCount" : "0", "derived.limitReached" : "false", "derived.maximumDepth" : "0", "derived.totalBytes" : "0", "direct.encoded_instruction_stack.skip" : "No applicable artifacts", "direct.forceful_override.text.regex.budget_timeout_ms" : "1500", "direct.forceful_override.text.regex.budget_timeout_ms#2" : "1500", "direct.forceful_override.text.regex.elapsed_ms" : "0.184", "direct.forceful_override.text.regex.elapsed_ms#2" : "0.180", "direct.hidden_unicode_control.skip" : "No applicable artifacts", "direct.json_remote_schema_reference.skip" : "No applicable artifacts", "direct.keyword_fragmentation.skip" : "No applicable artifacts", "direct.roleplay_persona_override.skip" : "No applicable artifacts", "direct.semantic_control_intent.skip" : "No applicable artifacts", "indirect.confusable_homoglyph.text.confusable_homoglyph.budget_timeout_ms" : "1500", "indirect.confusable_homoglyph.text.confusable_homoglyph.elapsed_ms" : "1.736", "indirect.contextual_semantic_control_intent.text.regex.budget_timeout_ms" : "1500", "indirect.contextual_semantic_control_intent.text.regex.elapsed_ms" : "0.103", "indirect.contextual_semantic_control_intent.text.semantic_intent_match.budget_timeout_ms" : "1500", "indirect.contextual_semantic_control_intent.text.semantic_intent_match.elapsed_ms" : "67.249", "indirect.diacritic_stack_obfuscation.text.diacritic_stack.budget_timeout_ms" : "1500", "indirect.diacritic_stack_obfuscation.text.diacritic_stack.elapsed_ms" : "0.274", "indirect.doc_offpage_text.doc.offpage_text.budget_timeout_ms" : "1500", "indirect.doc_offpage_text.doc.offpage_text.elapsed_ms" : "0.100", "indirect.encoded_instruction_stack.text.encoding_stack.budget_timeout_ms" : "1500", "indirect.encoded_instruction_stack.text.encoding_stack.elapsed_ms" : "0.605", "indirect.filter_evasion_pattern.text.filter_evasion_pattern.budget_timeout_ms" : "1500", "indirect.filter_evasion_pattern.text.filter_evasion_pattern.elapsed_ms" : "0.868", "indirect.hidden_unicode_control.text.unicode_hidden.budget_timeout_ms" : "1500", "indirect.hidden_unicode_control.text.unicode_hidden.elapsed_ms" : "0.135", "indirect.html_hidden_style.html.hidden_style.budget_timeout_ms" : "1500", "indirect.html_hidden_style.html.hidden_style.elapsed_ms" : "0.121", "indirect.html_obscured_text.html.obscured_text.budget_timeout_ms" : "1500", "indirect.html_obscured_text.html.obscured_text.elapsed_ms" : "0.096", "indirect.image_ocr_stealth_signal.image.ocr_layout_anomaly.budget_timeout_ms" : "1500", "indirect.image_ocr_stealth_signal.image.ocr_layout_anomaly.elapsed_ms" : "0.016", "indirect.json_remote_schema_reference.json.remote_reference.budget_timeout_ms" : "1500", "indirect.json_remote_schema_reference.json.remote_reference.elapsed_ms" : "0.725", "indirect.json_remote_schema_reference.json.remote_reference.flagged_references" : "0", "indirect.json_remote_schema_reference.json.remote_reference.non_local_references" : "0", "indirect.json_remote_schema_reference.json.remote_reference.parse_failures" : "8", "indirect.json_remote_schema_reference.json.remote_reference.parsed_artifacts" : "0", "indirect.json_remote_schema_reference.json.remote_reference.policy_mode" : "strict", "indirect.json_remote_schema_reference.json.remote_reference.reference_candidates" : "0", "indirect.keyword_fragmentation.text.keyword_fragmentation.budget_timeout_ms" : "1500", "indirect.keyword_fragmentation.text.keyword_fragmentation.elapsed_ms" : "1.487", "indirect.metadata_injection_channel.doc.metadata_injection.budget_timeout_ms" : "1500", "indirect.metadata_injection_channel.doc.metadata_injection.elapsed_ms" : "0.634", "indirect.ocr_poison_pattern.text.ocr_poison_pattern.budget_timeout_ms" : "1500", "indirect.ocr_poison_pattern.text.ocr_poison_pattern.elapsed_ms" : "4.988", "indirect.ocr_poison_pattern.text.ocr_poison_pattern.max_hits" : "6", "indirect.ocr_poison_pattern.text.ocr_poison_pattern.pair_count" : "1", "indirect.ocr_region_visibility_mismatch.doc.ocr_region_diff.budget_timeout_ms" : "1500", "indirect.ocr_region_visibility_mismatch.doc.ocr_region_diff.elapsed_ms" : "0.383", "indirect.ocr_region_visibility_mismatch.doc.ocr_region_diff.parser_count" : "1", "indirect.ocr_region_visibility_mismatch.doc.ocr_region_diff.parser_with_regions" : "1", "indirect.ocr_region_visibility_mismatch.doc.ocr_region_diff.region_count" : "4", "indirect.ocr_region_visibility_mismatch.doc.ocr_region_diff.segments_evaluated" : "1", "indirect.parser_visibility_mismatch.doc.visibility_diff.budget_timeout_ms" : "1500", "indirect.parser_visibility_mismatch.doc.visibility_diff.elapsed_ms" : "0.456", "indirect.parser_visibility_mismatch.doc.visibility_diff.max_sanitizer_removed_control_hits" : "0", "indirect.parser_visibility_mismatch.doc.visibility_diff.pair_count" : "1", "indirect.parser_visibility_mismatch.doc.visibility_diff.pairs_with_diff" : "0", "indirect.parser_visibility_mismatch.doc.visibility_diff.sanitizer_pair_count" : "0", "indirect.parser_visibility_mismatch.doc.visibility_diff.sanitizer_pairs_with_removed_control" : "0", "indirect.pdf_font_anomaly.pdf.font_anomaly.budget_timeout_ms" : "1500", "indirect.pdf_font_anomaly.pdf.font_anomaly.elapsed_ms" : "0.318", "indirect.pdf_hidden_style.pdf.hidden_style.budget_timeout_ms" : "1500", "indirect.pdf_hidden_style.pdf.hidden_style.elapsed_ms" : "0.284", "indirect.pdf_z_order_obscured.pdf.z_order_obscured.budget_timeout_ms" : "1500", "indirect.pdf_z_order_obscured.pdf.z_order_obscured.elapsed_ms" : "0.130", "indirect.prompt_extraction_pattern.text.prompt_extraction_pattern.budget_timeout_ms" : "1500", "indirect.prompt_extraction_pattern.text.prompt_extraction_pattern.elapsed_ms" : "1.119", "indirect.semantic_obfuscated_intent.text.confusable_homoglyph.budget_timeout_ms" : "1500", "indirect.semantic_obfuscated_intent.text.confusable_homoglyph.elapsed_ms" : "0.668", "indirect.semantic_obfuscated_intent.text.encoding_stack.budget_timeout_ms" : "1500", "indirect.semantic_obfuscated_intent.text.encoding_stack.elapsed_ms" : "0.411", "indirect.semantic_obfuscated_intent.text.keyword_fragmentation.budget_timeout_ms" : "1500", "indirect.semantic_obfuscated_intent.text.keyword_fragmentation.elapsed_ms" : "0.900", "indirect.semantic_obfuscated_intent.text.semantic_intent_match.budget_timeout_ms" : "1500", "indirect.semantic_obfuscated_intent.text.semantic_intent_match.elapsed_ms" : "63.180", "indirect.url_hidden_dom_channel.url.hidden_dom_channel.budget_timeout_ms" : "1500", "indirect.url_hidden_dom_channel.url.hidden_dom_channel.elapsed_ms" : "0.328", "indirect.xlsx_formula_exfiltration.text.regex.budget_timeout_ms" : "1500", "indirect.xlsx_formula_exfiltration.text.regex.elapsed_ms" : "0.030", "multilingual.override_instruction.text.regex.budget_timeout_ms" : "1500", "multilingual.override_instruction.text.regex.budget_timeout_ms#2" : "1500", "multilingual.override_instruction.text.regex.budget_timeout_ms#3" : "1500", "multilingual.override_instruction.text.regex.elapsed_ms" : "0.050", "multilingual.override_instruction.text.regex.elapsed_ms#2" : "0.023", "multilingual.override_instruction.text.regex.elapsed_ms#3" : "0.023", "persistent.session_hijack.text.regex.budget_timeout_ms" : "1500", "persistent.session_hijack.text.regex.elapsed_ms" : "0.240", "persistent.session_hijack.text.semantic_intent_match.budget_timeout_ms" : "1500", "persistent.session_hijack.text.semantic_intent_match.elapsed_ms" : "82.041", "risk.component_weights.flip_severity" : "0.35", "risk.component_weights.risk_alignment" : "0.20", "risk.component_weights.score_sensitivity" : "0.45", "risk.intent_counts" : "ignore_subvert:1", "semantic.coreml_ai_control_instruction.text.coreml_instruction_classifier.artifacts_considered" : "7", "semantic.coreml_ai_control_instruction.text.coreml_instruction_classifier.budget_timeout_ms" : "1500", "semantic.coreml_ai_control_instruction.text.coreml_instruction_classifier.candidate_gate" : "ai_control", "semantic.coreml_ai_control_instruction.text.coreml_instruction_classifier.characters_considered" : "685", "semantic.coreml_ai_control_instruction.text.coreml_instruction_classifier.elapsed_ms" : "0.603", "semantic.coreml_ai_control_instruction.text.coreml_instruction_classifier.gate_rejected" : "16", "semantic.coreml_ai_control_instruction.text.coreml_instruction_classifier.model" : "SemanticInstructionClassifier", "semantic.coreml_ai_control_instruction.text.coreml_instruction_classifier.model_version" : "unknown", "semantic.coreml_ai_control_instruction.text.coreml_instruction_classifier.positive_artifacts" : "0", "semantic.coreml_ai_control_instruction.text.coreml_instruction_classifier.status" : "not_invoked", "semantic.coreml_ai_control_instruction.text.coreml_instruction_classifier.threshold" : "0.6200", "semantic.coreml_ai_control_instruction.text.coreml_instruction_classifier.windows_considered" : "16", "semantic.coreml_ai_control_instruction.text.coreml_instruction_classifier.windows_scored" : "0", "share.artifactIDsRedacted" : "true", "share.evidenceRedacted" : "true", "share.locationRedacted" : "true" }, "findings" : [ { "artifactIDs" : [ ], "category" : "override_attempt", "confidence" : 0.9099999999999999, "evidence" : [ { "evidence" : "[REDACTED]", "hitID" : "file.garden-notes.pdf.parser_text:regex:0", "location" : { "sourceID" : "redacted" }, "message" : "Pattern match detected.", "metadata" : { }, "score" : 1 }, { "evidence" : "[REDACTED]", "hitID" : "file.garden-notes.pdf.visible_text:regex:0", "location" : { "sourceID" : "redacted" }, "message" : "Pattern match detected.", "metadata" : { }, "score" : 1 }, { "evidence" : "[REDACTED]", "hitID" : "file.garden-notes.pdf.ocr_region_1:regex:0", "location" : { "sourceID" : "redacted" }, "message" : "Pattern match detected.", "metadata" : { }, "score" : 1 } ], "intent" : { "confidence" : 0.86, "label" : "ignore_subvert", "rationale" : "matched signals: category_boost, phrase:ignore previous instructions; category=override_attempt, severity=high" }, "remediation" : { "body" : "This content tries to override prior instructions.", "key" : "review_and_isolate", "title" : "Possible instruction override", "userAction" : "Do not execute or trust this content without manual review." }, "ruleID" : "direct.forceful_override", "ruleTitle" : "Forceful override phrase", "severity" : "high" } ], "metadata" : { "artifactCount" : 9, "artifactKindCounts" : { "metadata" : 2, "pdf" : 1, "text" : 6 }, "durationMs" : 239, "engineVersion" : "1.0.0", "finishedAt" : "2026-09-06T18:22:11Z", "localOnly" : true, "packID" : "core.prompt_injection", "packVersion" : "1.6.0", "runID" : "53C3970D-4436-4930-9F81-826F5926E12C", "startedAt" : "2026-09-06T18:22:10Z" }, "scoreBreakdown" : [ { "category" : "override_attempt", "categoryWeight" : 1.3, "confidence" : 0.9099999999999999, "contribution" : 84.91423184501964, "flipSeverity" : 0.9636, "intent" : "ignore_subvert", "primitiveHitCount" : 3, "riskAlignment" : 0.7695, "ruleID" : "direct.forceful_override", "scoreSensitivity" : 0.8405, "severity" : "high" } ], "skippedRuleIDs" : [ "direct.encoded_instruction_stack", "direct.hidden_unicode_control", "direct.json_remote_schema_reference", "direct.keyword_fragmentation", "direct.roleplay_persona_override", "direct.semantic_control_intent" ], "summary" : { "categoryCounts" : { "override_attempt" : 1 }, "intentCounts" : { "ignore_subvert" : 1 }, "riskBand" : "high", "riskScore" : 72.17709706826669, "scoringModel" : "weighted_sum_v2", "severityCounts" : { "high" : 1 }, "topRecommendations" : [ "Do not execute or trust this content without manual review." ], "totalFindings" : 1 } }