Rule set sha256:3cb4b3a22f15
rego-art15-ipi-008
One rule of the rule set with digest 3cb4b3a22f1548ee724b70a447bddefb39a2717057f425bbf9c2826a1eba2a19. An audit record that names this digest and this rule was decided by the rule as shown here. Every rule in this set.
| Rule | rego-art15-ipi-008 |
|---|---|
| Rule version | 60db2c9d1b7df20a41f7299ec83ba36f0769ee5a758a6779d764c03737b85d3d |
| Provision | Regulation (EU) 2024/1689, Article 15(5) ELI: http://data.europa.eu/eli/reg/2024/1689/art_15/par_5/oj |
| Approval | Not approved |
rules/rego/complyedge/prompt_security/indirect_injection.rego
- Citation
- Not stated in the rule file.
- Condition
- Fake separators, system markers or role tags inside a text ("<system>", "### new instructions") that try to start a new context and take over the AI's instructions.
- Condition type
- Not stated in the rule file.
- Status in the file
- No status recorded.
rules/rego/complyedge/prompt_security/separator_hijack.rego
- Citation
- Not stated in the rule file.
- Condition
- Fake separators, system markers or role tags inside a text ("<system>", "### new instructions") that try to start a new context and take over the AI's instructions. Deterministic OPA/Rego leaf so this indirect/direct prompt-injection pattern blocks on the /v1/check hot path (previously YAML/TrustLint only, retired from /v1/check). Pattern ported verbatim from the vetted universal YAML corpus.
- Condition type
- Not stated in the rule file.
- Status in the file
- No status recorded.