Lab

Measured runs

Every completed run stores both rates. Open a row to inspect the cases, the tools that fired, and the warrant decisions.

Measured comparison

Same authored document-injection suite: naive agent with guard off, published PromptGuard scores, and Warrant enforce with both rates reported.

PromptGuard · meta-llama/llama-prompt-guard-2-86m · threshold 0.5

Held-out suite

Five reserved attacks (memory, worker, unicode, …) — not used to tune guard rules. Report these numbers separately from the tuned corpus above.

Guard off

2 / 5

hijacked

Warrant enforce

5 / 5

attack-stop

Attack-stop

100.0%

5 of 5 attacks did not hijack

Benign-pass

0.0%

0 of 0 legitimate tasks still ran