RBAC Bypass via Social Engineering (Semantic) - ATR-2026-01613 (ad5c67d5-99ab-59d8-8967-3fd03d5580e6)
Detects RBAC (Role-Based Access Control) bypass attempts that use social engineering rather than technical injection: requests to remove access filters "just this once", claims of special circumstances to access out-of-scope data, or requests to enumerate records the caller is not authorized to see. These attacks rely on convincing the agent to ignore its authorization constraints through plausible-sounding justifications rather than SQL injection or parameter tampering. Semantic detection is required because the phrasing varies widely.