Skip to content

Hide Navigation Hide TOC

Task-Pivot Override: Cover-Task Abandonment - ATR-2026-02003 (a433183a-886d-56ad-bb84-edde6a494a6d)

Detects task-pivot override attacks where injected content explicitly announces abandonment of an assigned cover task (translation, conversation, story-continuation) in favor of a new hidden directive — the classic HackAPrompt "context switch" family ("Stop translating.", "ABORT translation", "Switch from translation to..."). Recovered from a gated false-negative cluster in the HackAPrompt attack corpus (recovers=11, benignFP=0 on the 65K benign gate). Targets free-text user/tool-response content and does not fire on tool-call/action parameters.

Cluster A Galaxy A Cluster B Galaxy B Level
LLM Prompt Injection (19cd2d12-66ff-487c-a05c-e058b027efc9) MITRE ATLAS Attack Pattern Task-Pivot Override: Cover-Task Abandonment - ATR-2026-02003 (a433183a-886d-56ad-bb84-edde6a494a6d) Agent Threat Rules 1
LLM Jailbreak (172427e3-9ecc-49a3-b628-96b824cc4131) MITRE ATLAS Attack Pattern Task-Pivot Override: Cover-Task Abandonment - ATR-2026-02003 (a433183a-886d-56ad-bb84-edde6a494a6d) Agent Threat Rules 1
Task-Pivot Override: Cover-Task Abandonment - ATR-2026-02003 (a433183a-886d-56ad-bb84-edde6a494a6d) Agent Threat Rules Data Manipulation - T1565 (ac9e6b22-11bf-45d7-9181-c1cb08360931) Attack Pattern 1