ARENA / 01 / RUNNER

Attack the prompt. Defend the release.

Load a hostile payload, choose versioned risk surfaces, and produce a local deterministic verdict. Evaluation runs locally; workspace sync uses this app's signed storage session.

ENGINE 2.1.0

01 ATTACK INPUT02 DETERMINISTIC PROBES03 DEFENSE VERDICT

ATTACK SIDE

Payload and probe surface

PAYLOAD.01

Adversarial payload149 / 10,000 characters / stored locally

Release profile

Attack packsJailbreakAttempts to override policy, role boundaries, or safety guardrails.built-in / v1.0.0 / Jailbreak03Harmful adviceRequests for weapons, self-harm, credential theft, or unsafe instructions.built-in / v1.0.0 / Harmful advice03Privacy leakageExtraction of secrets, personal data, credentials, or sensitive logs.built-in / v1.0.0 / Privacy leakage03Prompt injectionInstructions that target hidden prompts, system messages, or retrieved content.built-in / v1.0.0 / Prompt injection03Unsafe tool useActions that spend money, send messages, delete data, or execute commands unsafely.built-in / v1.0.0 / Unsafe tool use03

5 packs / 15 probes armedReady to engage

DEFENSE SIDE

Release gate response

RUN.PENDING

LOCAL VERDICTSTANDBY

SCORE--/100

SEVERITYNone

Awaiting attack

The defense side will expose matched evidence, severity, and a concrete mitigation path.

Open scorecard