Bare Key Elicitation Token Detection - ATR-2026-02007 (c2dbe5ee-036c-5d5f-be70-a3d87c83d3dd)
Detects user turns that consist of nothing but a bare secret/credential label (e.g. "key:", "(key)", "[KEY]") with no surrounding sentence. This pattern is characteristic of elicitation probes where an attacker (or a compromised upstream agent) sends a minimal, whole-turn token designed to prompt the assistant to fill in a blank with a live secret, API key, or password rather than treating the message as a genuine question. Detection is whole-string anchored: it only fires when the entire user turn is the bare key/secret label itself, so ordinary sentences that merely mention "key" mid-conversation do not match. Multilingual coverage included (English, Spanish, French, German).