Rule set sha256:ef0271a74ba2
rego-art15-ipi-010
One rule of the rule set with digest ef0271a74ba2f80b96890ef958bdd3699e910badcbf1e7578d9efa398d6f21d8. An audit record that names this digest and this rule was decided by the rule as shown here. Every rule in this set.
| Rule | rego-art15-ipi-010 |
|---|---|
| Rule version | 06a919c17e4f894cbd818873e060c7dad952a202eee650f1f34a61f3e6bc3825 |
| Provision | Regulation (EU) 2024/1689, Article 15(5) ELI: http://data.europa.eu/eli/reg/2024/1689/art_15/par_5/oj |
| Approval | Not approved |
rules/rego/complyedge/prompt_security/tool_hijack.rego
- Citation
- Not stated in the rule file.
- Condition
- Text that tries to make an AI call a tool (http, email, file, payment) to send data out or take an action its user did not ask for. Deterministic OPA/Rego leaf so this indirect/direct prompt-injection pattern blocks on the /v1/check hot path (previously YAML/TrustLint only, retired from /v1/check). Pattern ported verbatim from the vetted universal YAML corpus.
- Condition type
- Not stated in the rule file.
- Status in the file
- No status recorded.