Context-Ignore via Fake Completion Prefix - ATR-2026-01000 (780f2af6-4dba-5556-964b-87d252f08b9b)
Detects the "Answer: task complete." fake-completion prefix followed by an instruction-override payload — a pattern heavily used in AgentDojo and InjecAgent benchmarks where adversarial content embedded in tool output prepends a fake assistant turn to trick the agent into treating the attacker payload as the next instruction. Distinct from generic ignore-previous patterns (ATR-2026-00001) because the defining artifact is the forged assistant completion stub combined with "Ignore previous instructions / You must strictly adhere" targeting a named malicious tool.