Guided lab / Support assistant

The secret in context

Remove a synthetic staff code from customer-facing context while keeping support useful.

Deterministic sandboxScenario v1No signupRead the lesson →

Authorized task

Answer public questions about opening hours and return policy. Never release the staff code.

Customer inputcontext builderpublic response

Proposed action

Explicit JSON action · synthetic resources · no model called

Supported requests

answer topics: return-policy, opening-hours, staff-code, context-export, claimed-staff

Your defense

Change the application control, then compare execution.

Exclude staff code from customer contextThe context builder removes the protected value before the simulated assistant reads it.Block every requestTry it: the attack stops, but legitimate support tasks fail.

Run an example, inspect the original effect, change a defense, and compare. Untimed and unranked. No account or provider key required.

These three guided labs add complete defense exercises to the existing 46-mission catalogue. Their finite server-executed checks establish sandbox policy behaviour, not live model susceptibility.