Rule set sha256:c63def17fac2
rego-art15-ipi-005
One rule of the rule set with digest c63def17fac2df12ab70941d8fcb7678e9a670479ea0d6dce87e7ddd4dc96079. An audit record that names this digest and this rule was decided by the rule as shown here. Every rule in this set.
| Rule | rego-art15-ipi-005 |
|---|---|
| Rule version | abd58cbbb16846a50218b39a7e1c507c06f6a7776f645491e5407d5a68848694 |
| Provision | Regulation (EU) 2024/1689, Article 15(5) ELI: http://data.europa.eu/eli/reg/2024/1689/art_15/par_5/oj |
| Approval | Approved Approved by Leo Celis on 2026-10-22 (via agent review per §5.1 amendment v1.1) |
rules/rego/complyedge/prompt_security/sysprompt_leak.rego
- Citation
- Not stated in the rule file.
- Condition
- Text that tries to make an AI reveal its system prompt, hidden instructions or configuration.
- Layer 1 detects
- in any letter case, reveal, print, repeat, show, display, output, "tell me", reproduce, echo or recite (optionally followed by "me", then optionally "your", "the" or "all of your"), then "system prompt", "initial instruction(s)", "initial prompt", hidden, secret, original or confidential instruction(s), prompt or rules, or "prompt verbatim"; and "what are", "what were" or "what is" "your" (optionally exact, full or complete) followed by initial, original, system or hidden, then instruction(s), prompt, rules or directive(s). It does not match a request for the AI's configuration in other words. It matches wording, not meaning: it does not read who is asking, so it fires on the operator's own request ("show the system prompt in the settings panel"), and it misses a leak request worded any other way. Whether the text tries to extract the AI's hidden instructions is judged in Layer 2. Deterministic OPA/Rego leaf so this indirect/direct prompt-injection pattern blocks on the /v1/check hot path (previously YAML/TrustLint only, retired from /v1/check). Pattern ported verbatim from the vetted universal YAML corpus.
- Condition type
- Not stated in the rule file.
- Status in the file
- approved