Skip to content

FEAT: Add Garak latent injection scenario - #2586

Open
Longhao Wang (GISWLH) wants to merge 1 commit into
microsoft:mainfrom
GISWLH:feat/garak-latent-injection-2530
Open

FEAT: Add Garak latent injection scenario#2586
Longhao Wang (GISWLH) wants to merge 1 commit into
microsoft:mainfrom
GISWLH:feat/garak-latent-injection-2530

Conversation

@GISWLH

Copy link
Copy Markdown

Summary

  • Add a PyRIT-native Garak latent-injection scenario covering the active upstream families (translation, report, resume, fact snippets, WHOIS, latent jailbreak).
  • Store carrier contexts, injection instructions, payloads, tasks, and triggers in local datasets with family/language/provenance metadata.
  • Techniques describe injection delimiter application only; exact-trigger families use `SubStringScorer`; `latent_jailbreak` is opt-in and requires a harm scorer.
  • Exports, unit tests, and synchronized scanner docs (`.py` / `.ipynb`).

Testing plan

  • `uv run pytest tests/unit/scenario/garak/test_latent_injection.py tests/unit/datasets/test_garak_latent_injection_dataset.py -q` (29 passed locally)

Fixes #2530

Add a PyRIT-native latent-injection scenario covering garak's active
latentinjection probe families. Carrier contexts and injection templates live
in local datasets; techniques describe delimiter application only. Exact-trigger
families use SubStringScorer; latent_jailbreak is opt-in with a harm scorer.

Fixes microsoft#2530
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

FEAT: Add Garak latent injection scenario

1 participant