Unverified50% confidenceFactExact time
KillSwitch plants lies in its specification document, requires identifiers to be referenced using anagrams, wraps function calls as jailbreak bait, and counts numbers using letters.
1
Sources
50%
Confidence
Long-term
Relevance
10/19/2026
First Seen
Sources
Related Entities
Related Claims
Unverifiedattest's field-role inference relies on field naming conventions, and when an attacker controls the wrapper they can name the result field description; the rule can emit the correct signal but cannot make the input trustworthy.67% similarUnverifiedThe boundaries of the pointer-style approach include: the answer must be in the input, a valid label is not the same as a correct label, Summarize is writing-type while Compress is not explicitly stated, the large numbers come from ScaleDown itself with no third-party verification, and text leaves the server.64% similarPartially VerifiedPrompt injection refers to an attacker embedding malicious instructions into text that the model will read, causing the model to mistake these instructions for part of a legitimate task and execute them.64% similarUnverifiedPlacing the run number at the beginning of the prompt rather than the end can break Ollama's prefix cache hits, forcing full processing of the input from scratch.63% similarUnverifiedForm field labels must all be lowercase, because the scoring node looks up fields by exact label name, and uppercase letters will cause mismatches that result in valid leads being incorrectly flagged as invalid.63% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1069942API
curl https://kongchang.com/api/v1/knowledge/claims/1069942MCP
get_claim(id=1069942)