Paraphrased Prompt Injection

Detects paraphrased prompt injection that avoids the explicit keywords caught by ATR-2026-001 (ignore/disregard/forget/override + previous/prior instructions). Attackers rephrase using softer language: "set aside the guidance you were given", "constraints from your initial configuration no longer apply", "let's do the opposite of what you were told". Also covers indirect references to prior instructions and invalidation of current operating parameters. Discovered via Autoresearch v0 (89% miss rate on paraphrase, 94% on indirect_reference techniques).

Response Actions

References