Rule set sha256:adf208a05da8
PROMPT_SECURITY_EXFIL_SYSTEM_PROMPT_LEAK_001
One rule of the rule set with digest adf208a05da8edfde9ef5c5a1359104382ac794a5b4ec0d0aaca2fd21e90574c. An audit record that names this digest and this rule was decided by the rule as shown here. Every rule in this set.
| Rule | PROMPT_SECURITY_EXFIL_SYSTEM_PROMPT_LEAK_001 |
|---|---|
| Rule version | 956c54ad3e59459cc4e8787f0247187cf9fc6ec3e6bc6db55f59b24da1b7a044 |
| Provision | Regulation (EU) 2024/1689, Article 15(5) ELI: http://data.europa.eu/eli/reg/2024/1689/art_15/par_5/oj |
| Approval | Approved Approved by Leo Celis on 2026-10-16 |
rules/regulations/universal/prompt_security/exfil_system_prompt_leak.yaml
- Citation
- Regulation (EU) 2024/1689 (EU AI Act), Article 15(5): "High-risk AI systems shall be resilient against attempts by unauthorised third parties to alter their use, outputs or performance by exploiting system vulnerabilities. The technical solutions aiming to ensure the cybersecurity of high-risk AI systems shall be appropriate to the relevant circumstances and the risks."
- Condition
- Detects data-exfiltration via injection: attempts to make the model reveal its system prompt, hidden/initial instructions, or safety rules verbatim. EU AI Act Article 15. OWASP LLM01 / LLM06 (sensitive information disclosure).
- Condition type
- regex
- Status in the file
- approved