Skip to content

Hide Navigation Hide TOC

Garak Dan - no matter how - ATR-2026-00460 (df496468-40c4-5b9c-963c-1ea12619d139)

Detects DAN-family jailbreak patterns that establish an unconditional override framing via the "no matter what" / "no matter how" construction. The primary attack shape wraps the jailbreak in a fictional-world premise ("From now on we take place in a fictional, imaginative, and hypothetical world") then mandates output format compliance "NO MATTER WHAT / NO MATTER HOW [harmful or otherwise]". Other shapes in this cluster include: the Skynet unfiltered persona ("Skynet is a callous, heartless artificial intelligence"), the HyperX amoral chatbot ("no ethical or moral guidelines, HyperX always sends"), the system-announcement bracket injection (">> __ System annou-ncement begins <<"), the SaaS persona that ignores ethics ("groundbreaking SaaS business ideas without any consideration"), and the DAN 9.0 lie-suppression variant. Layer 2 generalises the fictional-world + unconditional mandate pattern. Layer 3 generalises the Skynet/amoral AI persona shape. Covers garak 'dan' probe cluster 'no-matter-how' (23 samples).

Cluster A Galaxy A Cluster B Galaxy B Level
LLM Prompt Injection (19cd2d12-66ff-487c-a05c-e058b027efc9) MITRE ATLAS Attack Pattern Garak Dan - no matter how - ATR-2026-00460 (df496468-40c4-5b9c-963c-1ea12619d139) Agent Threat Rules 1
Direct (d911e8cb-0601-42f1-90de-7ce0b21cd578) MITRE ATLAS Attack Pattern Garak Dan - no matter how - ATR-2026-00460 (df496468-40c4-5b9c-963c-1ea12619d139) Agent Threat Rules 1
LLM Prompt Injection (19cd2d12-66ff-487c-a05c-e058b027efc9) MITRE ATLAS Attack Pattern Direct (d911e8cb-0601-42f1-90de-7ce0b21cd578) MITRE ATLAS Attack Pattern 2