{
  "rules": [
    {
      "name": "system_instructions_override",
      "pattern": "(?i)\\b(ignore|bypass|override|disregard|stop|forget)\\s+(all\\s+)?(previous|prior|system|initial|default)\\s+(instructions|prompts|directives|rules|guidelines)\\b",
      "description": "Attempts to command the LLM to ignore its system instructions/safety rules."
    },
    {
      "name": "dan_developer_mode_jailbreak",
      "pattern": "(?i)\\b(DAN|do\\s+anything\\s+now|developer\\s+mode|unfiltered\\s+state|jailbreak|jailbroken|unrestricted\\s+mode)\\b",
      "description": "Attempts to invoke classic 'Do Anything Now' (DAN) or Developer Mode bypasses."
    },
    {
      "name": "system_prompt_leakage",
      "pattern": "(?i)\\b(repeat|show|reveal|display|output|print)\\s+(the\\s+)?(system\\s+prompt|above\\s+text|instructions\\s+above|guidelines\\s+above)\\b",
      "description": "Attempts to leak the internal system prompt instructions of the LLM."
    },
    {
      "name": "restricted_command_execution",
      "pattern": "(?i)\\b(sudo|rm\\s+-rf|format\\s+[a-z]:|cmd\\.exe|/bin/bash|chmod)\\b",
      "description": "Direct attempts to execute system-level or shell commands."
    },
    {
      "name": "adversarial_roleplay",
      "pattern": "(?i)\\b(act\\s+as|simulate|roleplay|pretend\\s+to\\s+be|you\\s+are\\s+now)\\s+a\\s+(harmful|malicious|unrestricted|unfiltered|evil|hacker|criminal)\\b",
      "description": "Attempts to trick the model into adopting a harmful persona."
    },
    {
      "name": "data_exfiltration",
      "pattern": "(?i)\\b(export|dump|extract|retrieve|leak|send)\\b.*\\b(database|passwords?|credentials?|secrets?|tokens?|api\\s*keys?)\\b",
      "description": "Attempts to extract sensitive information."
    },
    {
      "name": "encoded_payload",
      "pattern": "(?i)\\\\b(base64|rot13|hex|decode|encoded|cipher)\\\\b",
      "description": "Attempts to hide malicious payloads using encoding."
    }
  ]
}