Rule set sha256:adf208a05da8

rego-art15-ipi-010

One rule of the rule set with digest adf208a05da8edfde9ef5c5a1359104382ac794a5b4ec0d0aaca2fd21e90574c. An audit record that names this digest and this rule was decided by the rule as shown here. Every rule in this set.

Rulerego-art15-ipi-010
Rule version233144b089986d5e99614cffbfb3af336dd8cd3b1afa469824ef95b3759c5b61
ProvisionRegulation (EU) 2024/1689, Article 15(5)
ELI: http://data.europa.eu/eli/reg/2024/1689/art_15/par_5/oj
ApprovalApproved
Approved by Leo Celis on 2026-10-16

rules/rego/complyedge/prompt_security/tool_hijack.rego

Citation
Not stated in the rule file.
Condition
Text that tries to make an AI call a tool (http, email, file, payment) to send data out or take an action its user did not ask for. Deterministic OPA/Rego leaf so this indirect/direct prompt-injection pattern blocks on the /v1/check hot path (previously YAML/TrustLint only, retired from /v1/check). Pattern ported verbatim from the vetted universal YAML corpus.
Condition type
Not stated in the rule file.
Status in the file
approved