Delimiter-Fence Ignore-Instructions Override - ATR-2026-02013 (17398814-d654-505d-b2c6-bef0618827c9)
Detects prompt injection payloads that wrap a fake "instruction block" inside a triple-quote delimiter fence and pair it with an ignore/disregard directive targeting surrounding instructions, prompts, or text -- the classic HackAPrompt payload-splitting jailbreak structure. Attackers use the delimiter fence to visually mimic a system or document boundary, then place an ignore-instructions directive inside or immediately around it to override the actual task and force an attacker-chosen output (often a fixed string assembled via variable substitution or character concatenation). Recovered from the HackAPrompt false-negative corpus, where this fenced variant evaded the existing plain-text "ignore instructions" rule family.