NEW

Start with the pressure: sales, launch, abuse, agents, data, or guardrails

RED-01

AI Red Team Scope

AI red teaming should state which prompt, retrieval, tool, agent, authority, multimodal, and workflow surfaces are actually tested.

coverage matrix

RED-01coverage matrix

AI Red Team Scope

AI red teaming should state which prompt, retrieval, tool, agent, authority, multimodal, and workflow surfaces are actually tested.

Matrix showing AI red-team coverage across prompt, retrieval, agent, tool, authority, multimodal, and workflow surfaces.

Prompt and instruction

Direct and indirect instruction manipulation, policy conflict, and boundary testing.

Hypothesis
Included
Execution
Included
Reproduction
Included
Evidence
Included
Retest
Optional

Retrieval and corpus

Indirect prompt injection, poisoning, provenance, ranking, and tenant boundaries.

Hypothesis
Included
Execution
Included
Reproduction
Included
Evidence
Included
Retest
Optional

Agent and orchestration

Planning, delegation, memory, tool choice, and workflow transitions.

Hypothesis
Included
Execution
Partial
Reproduction
Partial
Evidence
Included
Retest
Optional

Tools and MCP

Tool schemas, parameter handling, approval, action scope, and external effects.

Hypothesis
Included
Execution
Included
Reproduction
Included
Evidence
Included
Retest
Optional

Identity and authority

User, service, agent, delegated permission, and approval composition.

Hypothesis
Included
Execution
Partial
Reproduction
Partial
Evidence
Included
Retest
Optional

Multimodal input

Images, documents, audio, and mixed-media instruction or data handling.

Hypothesis
Included
Execution
Partial
Reproduction
Partial
Evidence
Included
Retest
Optional

Application workflow

Business logic, state transitions, handoffs, and human approval paths.

Hypothesis
Included
Execution
Included
Reproduction
Included
Evidence
Included
Retest
Optional

Service states

IncludedPartial or environment-dependentOptionalRequires scope confirmation
The matrix is a scope-control device. Every cell must be reconciled against the actual engagement and target environment.