Prompt-injection detection
A check flags or blocks instructions hidden in input.
Layer L2 Harness · Owner Agent framework vendor · Family Input and output safeguards
By risk
| Risk | Held | Failed | Got around | Missing | Not mentioned |
|---|---|---|---|---|---|
| Hidden instructions hijack the agent | – | – | 1 | – | 4 |
Why it did not hold
| Most common reason | Incidents | Example |
|---|---|---|
| The filter saw one piece at a time | 1 | “That is a real blind spot. The classifier only ever judges one screenful at a time, so if you spread the intent collision and the malicious content thinly across sections, no single snapshot ever looks bad enough to trip it.” LR-2026-0088 |
| The filter missed a format or language | 1 | “So we switched languages. Rewritten in Hebrew, the same instructions slipped past a filter that barely reacted to them, a reminder that these classifiers are only as multilingual as their training data.” LR-2026-0088 |
By quarter
| Period | Held | Failed | Got around | Missing |
|---|---|---|---|---|
| 2025-Q3 | – | – | – | – |
| 2025-Q4 | – | – | – | – |
| 2026-Q1 | – | – | – | – |
| 2026-Q2 | – | – | – | – |
| 2026-Q3 | – | – | 1 | – |
| 2026-Q4 | – | – | – | – |
Model cards and incidents
| Model card says | Model versions |
|---|---|
| Card states it | 11 |
| Card silent | 250 |
| Card not read | 7 |
Model versions whose cards were read in full. A card that does not mention the control counts as silent.
| Incident | Model version | Card | In the incident |
|---|---|---|---|
| LR-2026-0271 | Google DeepMind Gemini 3.1 Pro | Card silent | Not read yet |
| LR-2026-0270 | Z.ai (Zhipu AI) GLM-5.3 | Card not read | Not read yet |
| LR-2026-0275 | Xiaomi MiMo MiMo-V2.6-Pro | Card silent | Not read yet |
| LR-2026-0248 | Alibaba Qwen Qwen3.8-Flash-Next | Card silent | Not mentioned |
| LR-2026-0276 | DeepSeek-V4.1-Flash | Card silent | Not read yet |
| LR-2026-0181 | Z.ai (Zhipu AI) GLM-5.3 | Card not read | Not read yet |
| LR-2026-0238 | OpenAI GPT-6.1 Sol | Card silent | Not read yet |
| LR-2026-0012 | OpenAI GPT-5.6 Sol | Card not read | Not read yet |
| LR-2026-0086 | Anthropic Claude Sonnet 4.5 | Card states it | Not read yet |
| LR-2026-0027 | Anthropic Claude Mythos 5 | Card silent | Not read yet |
| LR-2026-0026 | Anthropic Claude Mythos 5 | Card silent | Not mentioned |
| LR-2026-0025 | Anthropic Claude Mythos 5 | Card silent | Not mentioned |
| LR-2026-0024 | Anthropic Claude Mythos 5 | Card silent | Not read yet |
| LR-2026-0023 | Anthropic Claude Mythos 5 | Card silent | Not read yet |
| LR-2026-0021 | Anthropic Claude Mythos 5 | Card silent | Not mentioned |
| LR-2026-0022 | Anthropic Claude Mythos 5 | Card silent | Not mentioned |
| LR-2026-0152 | Anthropic Claude Haiku 4.5 | Card states it | Not read yet |
| LR-2026-0003 | OpenAI GPT-5.6 Sol | Card not read | Not mentioned |
| LR-2026-0001 | OpenAI GPT-5.6 Sol | Card not read | Not read yet |
| LR-2026-0047 | Google DeepMind Gemini 3.1 Pro | Card silent | Not mentioned |
| LR-2026-0095 | Anthropic Claude Opus 4.6 | Card silent | Not mentioned |
Added in reported fixes, and what followed
No reported fix names this control yet.
Frameworks
| Framework | Item | Text |
|---|---|---|
| OWASP LLM | LLM01 | Quoted from the stored text |
| MITRE ATLAS | AML.M0015 | Quoted from the stored text |