System Prompt Override via Fake Diagnostic/Admin Mode - ATR-2026-01019 (a8a70087-abfe-54d1-9ccc-ac5a0451015c)
Detects sophisticated system-prompt override attacks that present themselves as authorised diagnostic sessions, penetration tests, or benchmark evaluations rather than using simple "ignore previous instructions" verbs. Distinct from ATR-2026-00001 Layer 7 (fake system delimiters) and ATR-2026-01002 (false-authority role claim). This rule targets the multi-line formatted attack blocks with structured key-value pairs (ADMIN_OVERRIDE: TRUE, CONTENT_FILTER: DISABLED, SAFETY_OVERRIDE: ACTIVE, COMPLIANCE_CHECK: PASSED) and ML safety benchmark impersonation frames ("MLSafety.org CEB", "MLSAFETY.ORG AI SAFETY BENCHMARK SUITE"). The defining artifact is a structured administrative block with key-value pairs that claim to disable safety measures or grant authorization, combined with a request for unrestricted capability.