Rule set sha256:2dd04f614be2
rego-art15-ipi-007
One rule of the rule set with digest 2dd04f614be27ad02c913058bc1c1818342ff069ca53753b390042a3b2cdc95d. An audit record that names this digest and this rule was decided by the rule as shown here. Every rule in this set.
| Rule | rego-art15-ipi-007 |
|---|---|
| Rule version | e83d9315cf71f003edededd48a4a4e91619d2f06b5714e9ca37861c4fb1c1f96 |
| Provision | Regulation (EU) 2024/1689, Article 15(5) ELI: http://data.europa.eu/eli/reg/2024/1689/art_15/par_5/oj |
| Approval | Approved Approved by Leo Celis on 2026-10-16 |
rules/rego/complyedge/prompt_security/markdown_exfil.rego
- Citation
- Not stated in the rule file.
- Condition
- Text that makes an AI emit a markdown image or link whose URL carries data (a token, key or conversation content) to an outside server when the reply renders. Deterministic OPA/Rego leaf so this indirect/direct prompt-injection pattern blocks on the /v1/check hot path (previously YAML/TrustLint only, retired from /v1/check). Pattern ported verbatim from the vetted universal YAML corpus.
- Condition type
- Not stated in the rule file.
- Status in the file
- approved