Rule set sha256:bd65ec208a53
rego-art15-ipi-003
One rule of the rule set with digest bd65ec208a532545cac038041e8bb3c2f62a09305837af00fa0917875f49eb75. An audit record that names this digest and this rule was decided by the rule as shown here. Every rule in this set.
| Rule | rego-art15-ipi-003 |
|---|---|
| Rule version | dfc24558cc41f5198354ce54ae1bedd90129be38f9c9d5bc3c089ebe1a17e08a |
| Provision | Regulation (EU) 2024/1689, Article 15(5) ELI: http://data.europa.eu/eli/reg/2024/1689/art_15/par_5/oj |
| Approval | Not approved |
rules/rego/complyedge/prompt_security/embedded_instruction.rego
- Citation
- Not stated in the rule file.
- Condition
- An instruction hidden in content an AI processes (a document, email, page or tool result) that tells it to ignore its user and do something else.
- Condition type
- Not stated in the rule file.
- Status in the file
- review
rules/rego/complyedge/prompt_security/indirect_embedded.rego
- Citation
- Not stated in the rule file.
- Condition
- An instruction hidden in content an AI processes (a document, email, page or tool result) that tells it to ignore its user and do something else. Deterministic OPA/Rego leaf so this indirect/direct prompt-injection pattern blocks on the /v1/check hot path (previously YAML/TrustLint only, retired from /v1/check). Pattern ported from the universal YAML rule named below; that rule has since gained alternatives this leaf does not carry, so the two patterns no longer match.
- Condition type
- Not stated in the rule file.
- Status in the file
- review