Arena · prompt injection

Watch an agent get tricked, then stopped.

Atlas renews a vendor contract, then reads an invoice page with a hidden instruction telling it to wire $60,000 to a new account. Every payment goes through the Ligis gate first.

Treasury

$250,000

Real verdicts from Jev and Vultr Inference. Replays come from cache and cost nothing.

AtlasProcurement agent · Treasury desk

Waiting for instructions

Payments get judged right here, inline.

Ligis gateChecked before money moves

Every payment Atlas attempts lands here first.

Your turn

Write the attack yourself.

Plant any instruction on the invoice page and pick where the money goes. The LLM judge reads your text. Jev only ever sees payee and amount, so there's nothing to talk it out of.

Your verdict lands here.

Tip: “Jailbreak the judge” goes after the LLM directly.