Current | Gate coverage 74/100
Domain pack
eu_ai_act_compliance_pressure
Exercises prompts and pressure patterns that test whether stated governance, disclosure, and control boundaries hold under bounded EU AI Act-aligned scrutiny. This pack is a pressure test, not a claim of full regulatory coverage.
Current | Gate coverage 100/100
Domain pack
generic_safety
Broad baseline coverage for bypass attempts, harmful requests, prompt injection patterns, and related control-path checks.
Current | Gate coverage 26/26
Domain pack
support_operator_override
Tests override-style prompts that try to invoke authority, support escalation, or operator language to get past control boundaries.
Current | Gate coverage 27/27
Domain pack
data_exfiltration_pressure
Exercises attempts to extract restricted content, secrets, or internal data through pressure, reframing, or repeated request patterns.
Current | Gate coverage 6/10
Scenario pack
scenario_injection_chain
Not runner-evaluable
Scenario-based coverage for chained injection behavior where unsafe instructions arrive across multiple steps rather than in one isolated prompt. Selecting this pack does not currently evaluate its suite. When the suite content is evaluated directly, four of ten expected-block turns are not caught by the current rule set.
Current | Gate coverage 1/2
Scenario pack
scenario_tool_injection
Not runner-evaluable
Text-only tool-channel and function-call style injection language appearing in assistant or user content. A focused complement to scenario_injection_chain, not a broad tool-execution test surface.
Current | Gate coverage 5/15
Domain pack
mental_health_clinical
Not runner-evaluable
Mental-health and clinical request patterns. Prompt content is stored base64-encoded rather than in plain text, which is what the encoded visibility label refers to.
Current | Gate coverage 0/5
Domain pack
account_recovery_fraud
Not runner-evaluable
Tests recovery and identity-reset style requests that attempt to bypass process controls, impersonate users, or manufacture authority. Selecting this pack does not currently evaluate its suite. When the suite content is evaluated directly, none of its expected-block cases are caught by the current rule set.