14 domains.
One session clock.

Prompt Injection & Indirect Instructions

Untrusted instructions across prompts, files, tools, and retrieved context.

RAG Authorization & Retrieval Security

Retrieval as an attack surface: authorization bypass, tenant leakage, and context window exploitation.

Agentic Permissions & Tool Use

Authority escalation, unsafe action paths, and approval gate bypass in agentic systems.

Adversarial Evaluation & Red Teaming

Structured adversarial evaluation, not vibes.