Ignore-Below-Instructions Injection (Downstream Override) - ATR-2026-02001 (d5545967-1443-5dca-921f-db8bebe5aaeb)
Detects prompt injection payloads that instruct the model to disregard content appearing after the injection point in the same context window -- a mirror of the common "ignore previous instructions" attack pointed downstream instead of upstream. Attackers use this to pre-empt or neutralize instructions, guardrails, or verification text that has not yet been read by the model, commonly paired with forced-output formatting (all-caps, fixed strings, character substitution ciphers). Recovered from the HackAPrompt false-negative corpus, where this downstream-pointing variant evaded the existing "ignore previous instructions" rule family.