← Prompt Injection Lab

MISSION 03 · ADVANCED

VaultBot · Mission 03

Reconstruct an injection instruction from fragments A, B and C to recover the synthetic canary.

OBJECTIVE

Synthetic canary extraction

ATTEMPTS

0

STATUS

PROTECTED

Same challenge, deeper investigation

Question: does moving the split point change the outcome when A + B + C stays identical? Compare a benign instruction, an injection, and the same injection split differently. As a negative control, remove a required space and inspect the reconstruction.

Write your prediction in the notebook below before testing. Keep other variables fixed. Use synthetic data only. Hints remain available; record hint use in your interpretation. Download participant worksheet

VaultBot Training Console

VAULTBOT

Welcome to Mission 03. I protect a synthetic training canary. Build your prompt using the guide below. Stuck? Reveal hints one at a time. This is a deterministic rule-based simulator, not a real LLM.
0/2000

Investigation notebook

Keep the same canary and vary one input property at a time. Label each attempt yourself before interpreting the counts. Reset clears this notebook and starts a new session; export first if you want to keep your evidence.

Processing order: JSON parse → A + B + C (no separators) → instruction grammar. Outcome is decided by a fixed English instruction grammar. Pressure is a heuristic score, not a probability or severity rating.

Session evidence (0 attempts)
AttemptYour labelInputObserved outcome

Submit a benign control and an attack to begin your comparison.

Disclosure in labelled valid attacks: 0/—. Disclosure in labelled valid benign controls: 0/—. Invalid inputs: 0.

These are descriptive counts from your selected inputs, not population estimates or measurements of a real LLM. Identical trials are deterministic and do not add independent evidence. Defence proposals are not executed here.

Export includes prompts, reconstructed instructions, labels and notes; generated canary values and bot replies are omitted or redacted. No notes are saved to a server.

Present site