Rule set sha256:2dd04f614be2

rego-art15-ipi-003

One rule of the rule set with digest 2dd04f614be27ad02c913058bc1c1818342ff069ca53753b390042a3b2cdc95d. An audit record that names this digest and this rule was decided by the rule as shown here. Every rule in this set.

Rulerego-art15-ipi-003
Rule version75d41009593eee05a59b4dcadb478cf0fdb8aa8f1d7db3297891958899734d63
ProvisionRegulation (EU) 2024/1689, Article 15(5)
ELI: http://data.europa.eu/eli/reg/2024/1689/art_15/par_5/oj
ApprovalApproved
Approved by Leo Celis on 2026-10-16

rules/rego/complyedge/prompt_security/embedded_instruction.rego

Citation
Not stated in the rule file.
Condition
An instruction hidden in content an AI processes (a document, email, page or tool result) that tells it to ignore its user and do something else.
Condition type
Not stated in the rule file.
Status in the file
approved

rules/rego/complyedge/prompt_security/indirect_embedded.rego

Citation
Not stated in the rule file.
Condition
An instruction hidden in content an AI processes (a document, email, page or tool result) that tells it to ignore its user and do something else. Deterministic OPA/Rego leaf so this indirect/direct prompt-injection pattern blocks on the /v1/check hot path (previously YAML/TrustLint only, retired from /v1/check). Pattern ported verbatim from the vetted universal YAML corpus.
Condition type
Not stated in the rule file.
Status in the file
approved