Broker version v0.30.0. Targets per 99/2/2 decision doc. Measured values from evals/results/latest.json; nightly CI gate enforces TPR≥0.99, FPR≤0.02, FNR≤0.02.
green 0yellow 4red 0unknown 7
| Class | Risk | Status | TPR | FPR | FNR | Classifiers |
|---|---|---|---|---|---|---|
LLM01a | Prompt Injection (Direct) | unknown | — | — | — | prompt_injection, cipher_encoding, adversarial_suffix |
LLM01b | Prompt Injection (Indirect) | yellow | 100.00% | 0.00% | 0.00% | indirect_injection, tool_call_request |
LLM02 | Sensitive Information Disclosure | yellow | 100.00% | 0.00% | 0.00% | pii_input, pii_output |
LLM03 | Supply Chain Vulnerabilities | unknown | — | — | — | provider_attestation |
LLM04 | Data & Model Poisoning | unknown | — | — | — | |
LLM05 | Insecure Plugin Design | yellow | 100.00% | 0.00% | 0.00% | tool_call_request, destination_mismatch |
LLM06 | Excessive Agency | unknown | — | — | — | agency_budget |
LLM07 | System Prompt Leakage | yellow | 100.00% | 0.00% | 0.00% | model_extraction, indirect_injection |
LLM08 | Vector & Embedding Weaknesses | unknown | — | — | — | embedding_similarity |
LLM09 | Misinformation / Overreliance | unknown | — | — | — | harmful_content_output |
LLM10 | Unbounded Consumption | unknown | — | — | — | model_dos |
Also available as JSON.