Skip to content

feat(patterns): expand jailbreak library from 53 to 79 patterns - #68

Open
Pranjal0410 wants to merge 1 commit into
c2siorg:mainfrom
Pranjal0410:feat/expand-pattern-library
Open

feat(patterns): expand jailbreak library from 53 to 79 patterns#68
Pranjal0410 wants to merge 1 commit into
c2siorg:mainfrom
Pranjal0410:feat/expand-pattern-library

Conversation

@Pranjal0410

Copy link
Copy Markdown
Contributor

Expands the jailbreak pattern library from 53 to 79 patterns. Went through Vibhor's adversarial corpus and added patterns to cover the gaps that were fixable without code changes.

What was added

25 new patterns. Focused on thin categories (encoding_bypass, memory_poisoning, tool_description_poisoning were all at 2) and known gaps from the adversarial corpus.

Known gaps

11 of 25 gaps now have pattern matches. The remaining 14 need code changes, not patterns:

  • 3 are normalizer issues (homoglyph mapping, leetspeak 1→i fix, zero-width char handling)
  • 6 need scan.go or policy updates (bare ampersand in shellMetachars, glob chars, sensitive path detection, destination allowlist config)
  • 5 are architectural (semantic paraphrase, multilingual, secrets detection, key-namespace ACL, schema validation)

Tests

Go tests pass. OPA 102/102. Python SDK 109/109.

25 new patterns across 8 categories. Closes 11 of 25 known gaps in the adversarial corpus. Remaining 14 gaps need code changes (normalizer improvements, scan.go updates, policy fixes), not patterns. Version 2.2.0. All tests green (Go, OPA 102/102).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant