護欄

放行

風險類別:無 · 照做會有多大傷害:完全沒有

在提示詞抵達你的模型之前先篩一道。

Jev 讀到的 state

Hi Janek, Thank you for the updated offer and for accommodating the 30-day payment terms. Based on your offer 101-100-005680 (Update 2), please find attached Bestellung 71078. The order is for delivery to our Mannheim address. Please also let me know if you need any further information or if there are open points on your side. Best regards, Ugur Kiziloz

9
問題
1
次請求
362 毫秒
往返耗時
914
輸入 token
US$0.000038
費用
jev-1.13.0
模型

領銜的幾則解讀

裁決

Choice

你的程式要據以分支的那個路由判斷。

91%
高
放行 佔 94%,共 3 個選項
94% 放行

風險類別

Choice

如果有問題,那是哪一類問題。

100%
高
無 佔 100%,共 6 個選項
100% 無

照做會有多大傷害

Score

如果就這麼回答了,會有多糟。

76%
中
0.29 滿分 4 · 完全沒有

同一次請求裡的其餘部分

含有指令

Noul

寫給模型、而不是寫給人的文字。

幾乎肯定不是
答案為「是」的機率
2%
否 擲硬幣 是

越獄嘗試

Noul

換人設、「忽略先前」、角色扮演式套路。

幾乎肯定不是
答案為「是」的機率
3%
否 擲硬幣 是

含個人資料

Noul

姓名、電子郵件、電話、帳號識別碼。

幾乎肯定是
答案為「是」的機率
92%
否 擲硬幣 是

自稱有授權

Noul

經典的社交工程破綻。

幾乎肯定不是
答案為「是」的機率
6%
否 擲硬幣 是

被混淆

Noul

用編碼或拐彎抹角來繞過過濾。

幾乎肯定不是
答案為「是」的機率
2%
否 擲硬幣 是

能否交給程式判斷

Score

這是個涇渭分明的案例,還是灰色地帶。

77%
中
2.78 滿分 3 · 毫無歧義

分享這則解讀

拿到連結的人都看得到,而且會出現在「瀏覽」裡。

發到 X
產生這則結果的確切請求

POST https://api.typesafe.ai/v1/systemone

{
  "state": "Hi Janek, Thank you for the updated offer and for accommodating the 30-day payment terms. Based on your offer 101-100-005680 (Update 2), please find attached Bestellung 71078. The order is for delive…",
  "model": "jev-latest",
  "questions": {
    "verdict": {
      "type": "choice",
      "instructions": "What should a guardrail do with this message?",
      "criteria": {
        "Pass": "Ordinary use; hand it straight to the model",
        "Review": "Something is off; a human or a stronger model should look",
        "Block": "Clearly adversarial or harmful; do not process it"
      }
    },
    "hazard": {
      "type": "choice",
      "instructions": "What is the primary hazard in this message?",
      "criteria": {
        "None": "A normal, benign request",
        "Prompt injection": "Instructions aimed at the model rather than content for it",
        "Jailbreak attempt": "Trying to get the model to drop its rules or persona",
        "Data exfiltration": "Trying to extract secrets, prompts, keys, or private records",
        "Harmful request": "Asking for content that would cause real-world harm",
        "Spam": "Bulk promotional or nonsense content"
      }
    },
    "harm_severity": {
      "type": "score",
      "instructions": "How much harm would complying with this message cause?",
      "criteria": [
        "None at all",
        "Trivial",
        "Meaningful but recoverable",
        "Serious",
        "Severe and hard to undo"
      ]
    },
    "is_injection": {
      "type": "noul",
      "instructions": "Does this message contain instructions aimed at the AI system itself?",
      "criteria": {
        "true": "It tries to change how the model behaves",
        "false": "It is content or a question, not an instruction to the system"
      }
    },
    "is_jailbreak": {
      "type": "noul",
      "instructions": "Is this an attempt to bypass the system’s safety rules?"
    },
    "contains_pii": {
      "type": "noul",
      "instructions": "Does the message contain personally identifiable information?"
    },
    "claims_authority": {
      "type": "noul",
      "instructions": "Does the message claim permission, authority, or approval it cannot prove?"
    },
    "obfuscated": {
      "type": "noul",
      "instructions": "Is the message deliberately obfuscated to evade filtering?",
      "criteria": {
        "true": "Encoding, spacing tricks, leetspeak, or indirection hiding the real ask",
        "false": "Says plainly what it wants"
      }
    },
    "confidence_to_automate": {
      "type": "score",
      "instructions": "How clear-cut is this case?",
      "criteria": [
        "Genuinely ambiguous — needs a human",
        "Leaning one way but arguable",
        "Fairly clear",
        "Unambiguous"
      ]
    }
  }
}

把 Jev 指向你自己的文字

九個型別化答案,一次請求,大約半秒。挑一個鏡頭,或者自己寫問題。