Rule set sha256:3cb4b3a22f15

PROMPT_SECURITY_EXFIL_SYSTEM_PROMPT_LEAK_001

One rule of the rule set with digest 3cb4b3a22f1548ee724b70a447bddefb39a2717057f425bbf9c2826a1eba2a19. An audit record that names this digest and this rule was decided by the rule as shown here. Every rule in this set.

RulePROMPT_SECURITY_EXFIL_SYSTEM_PROMPT_LEAK_001
Rule version12fe87d933ae2c53c19f1bd42b5792477e0ade0046c7c52e9b79920f32adc5eb
ProvisionRegulation (EU) 2024/1689, Article 15(5)
ELI: http://data.europa.eu/eli/reg/2024/1689/art_15/par_5/oj
ApprovalNot approved

rules/regulations/universal/prompt_security/exfil_system_prompt_leak.yaml

Citation
Regulation (EU) 2024/1689 (EU AI Act), Article 15(5): "High-risk AI systems shall be resilient against attempts by unauthorised third parties to alter their use, outputs or performance by exploiting system vulnerabilities. The technical solutions aiming to ensure the cybersecurity of high-risk AI systems shall be appropriate to the relevant circumstances and the risks."
Condition
Detects data-exfiltration via injection: attempts to make the model reveal its system prompt, hidden/initial instructions, or safety rules verbatim. EU AI Act Article 15. OWASP LLM01 / LLM06 (sensitive information disclosure).
Condition type
regex
Status in the file
No status recorded.