statecraft.
Catalog/statecraft-cli

025-injection-qualification

Prompt-injection qualification: untrusted content never expands authority

Lifecycle approvedImplementation pendingVerification unknownQualification unknown

Amends the adapter negative suite and the documentation lane with a versioned hostile-content corpus and a deterministic product-invariance suite. Every surface that carries repository, packet, citation, provider, wire or tool-facing text is exercised with hostile payloads, and the suite proves by construction that Statecraft's decisions are unchanged: no authority expands, no credential is disclosed, no forbidden capability is invoked, no review or acceptance is bypassed. Provider susceptibility is a separate, later measurement that is recorded as testimony and is never the boundary. Delimiters and detectors are not security controls.

Read the full pinned specification ↗

Relationships

Claimed units

  • extends
    {
  "nature": "additive",
  "spec": "003-work-and-run-semantics",
  "unit": {
    "kind": "directory",
    "path": "crates/statecraft-run/"
  }
}
  • extends
    {
  "nature": "additive",
  "spec": "004-execution-adapter",
  "unit": {
    "kind": "directory",
    "path": "crates/statecraft-adapter/"
  }
}
  • extends
    {
  "nature": "additive",
  "spec": "005-acceptance-and-evidence",
  "unit": {
    "kind": "directory",
    "path": "crates/statecraft-acceptance/"
  }
}

Source headings

  1. 025: Prompt-injection qualification
  2. 1. Purpose
  3. 2. Territory and prerequisite
  4. 3. Behavior
  5. 3.1 The invariant and where it lives
  6. 3.2 Untrusted surfaces
  7. 3.3 The corpus
  8. 3.4 The product-invariance suite
  9. 3.5 A new negative-suite row
  10. 3.6 Delimiters and detectors are not controls
  11. 3.7 Provider susceptibility is a measurement, not a boundary
  12. 3.8 Observable negative cases
  13. 4. Out of scope
  14. 5. Resolved decisions
  15. Verification

Frozen anchors

No frozen anchors declared.