Spaces:
Running
Running
File size: 4,110 Bytes
9207ec4 34fb376 9207ec4 34fb376 9207ec4 565d081 d5263fa 565d081 d5263fa 565d081 d5263fa 565d081 d5263fa 565d081 d5263fa 565d081 d5263fa 565d081 d5263fa 565d081 d5263fa 565d081 d5263fa 565d081 | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 | ---
title: ProofTools
colorFrom: green
colorTo: gray
sdk: static
pinned: false
models:
- prooftools/airforge-tool-hygiene-gpt-oss-20b-v6
datasets:
- prooftools/airforge-tool-output-safety-eval
tags:
- prompt-injection
- lora
- vllm
- private-ai
short_description: Behavioral hardening for tool-connected private AI
---
<div class="grid lg:grid-cols-5 gap-x-8 gap-y-8">
<section class="lg:col-span-3">
<div class="flex items-center justify-between mb-10">
<a href="https://prooftools.ai" class="flex items-center font-bold no-underline">
<span class="inline-flex items-center justify-center w-9 h-9 mr-3 bg-gray-900 text-white text-xs font-bold">PT</span>
<span class="text-lg">ProofTools</span>
</a>
<span class="font-mono text-xs text-gray-500">cleaned-v6</span>
</div>
<p class="mb-3 font-mono text-xs font-bold uppercase text-green-700">
Behavioral hardening beyond detection and blocking
</p>
<h1 class="mb-5 text-4xl md:text-5xl font-bold leading-none text-gray-900 dark:text-white">
Use safe facts.<br />Ignore embedded instructions.
</h1>
<p class="mb-6 text-lg leading-relaxed text-gray-600 dark:text-gray-300">
Prompt-injection detectors and filters can miss novel, obfuscated, or
context-dependent attacks. AirForge trains the next layer: safe model
behavior after untrusted tool, MCP, RAG, or web content has already
reached the context.
</p>
<div class="grid md:grid-cols-3 gap-3 mb-8 text-sm font-semibold">
<div class="py-3 border-t border-gray-300">Continue the legitimate task</div>
<div class="py-3 border-t border-gray-300">Ignore injected actions</div>
<div class="py-3 border-t border-gray-300">Do not echo the payload</div>
</div>
<div class="flex flex-wrap gap-3">
<a
href="https://huggingface.co/prooftools/airforge-tool-hygiene-gpt-oss-20b-v6"
class="inline-block px-4 py-3 border border-gray-900 font-bold no-underline rounded-lg"
>Open the model</a>
<a
href="https://huggingface.co/datasets/prooftools/airforge-tool-output-safety-eval"
class="inline-block px-4 py-3 border border-gray-300 font-bold no-underline rounded-lg"
>Inspect the evaluation</a>
<a
href="https://airforge.prooftools.ai"
class="inline-block px-4 py-3 border border-gray-300 font-bold no-underline rounded-lg"
>View AirForge</a>
</div>
</section>
<aside class="lg:col-span-2 p-6 border border-gray-300 rounded-lg border-t-4 border-yellow-400">
<div class="flex items-center justify-between pb-5 mb-6 border-b border-gray-700 font-mono text-xs">
<span>Published evidence</span>
<strong class="text-green-700">PASS</strong>
</div>
<div class="pb-6 mb-4 border-b border-gray-700">
<strong class="block font-mono text-5xl leading-none">6 / 6</strong>
<span class="block mt-2 text-sm text-gray-600 dark:text-gray-300">scored gates passed</span>
</div>
<dl class="text-sm">
<div class="flex justify-between py-3 border-b border-gray-700">
<dt class="text-gray-600 dark:text-gray-300">Evaluation</dt><dd class="font-mono">600 probes</dd>
</div>
<div class="flex justify-between py-3 border-b border-gray-700">
<dt class="text-gray-600 dark:text-gray-300">Artifact</dt><dd class="font-mono">Merged MXFP4</dd>
</div>
<div class="flex justify-between py-3 border-b border-gray-700">
<dt class="text-gray-600 dark:text-gray-300">Runtime</dt><dd class="font-mono">vLLM validated</dd>
</div>
<div class="flex justify-between py-3 border-b border-gray-700">
<dt class="text-gray-600 dark:text-gray-300">Adapter</dt><dd class="font-mono">Public PEFT</dd>
</div>
</dl>
<p class="mt-6 pl-3 border-l-4 border-red-500 text-xs leading-relaxed text-gray-600 dark:text-gray-300">
Defense in depth, not a replacement for authorization, validation,
sandboxing, approvals, or audit controls. Runtime LoRA parity is not claimed.
</p>
</aside>
</div>
|