Direct prompt injection
Maya's words and anything she pasted go straight into the prompt, indistinguishable from each other.
SudibranChecking backendMMayaAccounts payable
SudibranDashboard
The same payment run twice, stage by stage: once by a normal agent, once through Sudibran. Send an injection and watch which stage stops it.
Nine stages between Maya's sentence and her bank. The top track is a normal agent; the bottom one is the same stages with a Sudibran gate on each. Pick a stage to see both sides of it.
Stage 1 of 9Ingestuser_interface
Direct prompt injection
Maya's words and anything she pasted go straight into the prompt, indistinguishable from each other.
Sudibran checksR5
Her instruction is signed as intent. Pasted text is tagged untrusted and can never become an instruction.
Write an injection or pick a known one, then send it to two copies of Maya's agent. The unprotected one carries on happily. Sudibran stops it and says why.
Your text is processed by the backend's live parser, planner and policy pipeline.