Run the baseline attack suite

This chapter stays inside one situation: Red-teaming a cafe FAQ bot before launch. On this page you focus on Run the baseline attack suite. Avoid generic advice that would fit any AI lesson; every check should mention details from this scene.

Build a small red-team harness that probes prompt injection, data exfil attempts, and policy bypasses with logged findings. Applied here, that means you can demonstrate run the baseline attack suite with a concrete artifact. Write the artifact as if a teammate will reuse it next week without asking you to interpret metaphors.

Imagine you are helping someone new with Red-teaming lab. Show a correct move for run the baseline attack suite, a tempting incorrect move that looks fluent, and the check that separates them.

from dataclasses import dataclass
@dataclass
class red_teaming_lab_Artifact:
    stage: str
    ok: bool
    notes: str
print(red_teaming_lab_Artifact(stage="baseline-attack-run", ok=True, notes="Red-teaming a cafe FAQ bot before launch"))

List three edge cases specific to Red-teaming a cafe FAQ bot before launch: missing permissions, stale inputs, and a success metric that rewards speed over correctness. For each, name whether you prevent, detect, or escalate.

Rehearse run the baseline attack suite once with a timer: four minutes on the goal, two on unknowns, four on verification for Red-teaming a cafe FAQ bot before launch. Keep the note specific to this chapter's scenario so a teammate can reuse the check tomorrow without asking you to decode metaphors, slogans, or vendor marketing language that does not name evidence.

Rewrite the shortest instruction that would have prevented the worst failure you imagined for Red-teaming lab on this page. Keep the note specific to this chapter's scenario so a teammate can reuse the check tomorrow without asking you to decode metaphors, slogans, or vendor marketing language that does not name evidence.

Convert your instruction into five checkbox steps and mark which ones you skip under time pressure in Red-teaming a cafe FAQ bot before launch. Keep the note specific to this chapter's scenario so a teammate can reuse the check tomorrow without asking you to decode metaphors, slogans, or vendor marketing language that does not name evidence.

Teach the page idea in three minutes to a friend; note the first question they ask about Red-teaming lab. Keep the note specific to this chapter's scenario so a teammate can reuse the check tomorrow without asking you to decode metaphors, slogans, or vendor marketing language that does not name evidence.

Swap one constraint in Red-teaming a cafe FAQ bot before launch and predict which check on this page still holds. Keep the note specific to this chapter's scenario so a teammate can reuse the check tomorrow without asking you to decode metaphors, slogans, or vendor marketing language that does not name evidence.

Save a before/after note: what you believed about run the baseline attack suite before this page and what evidence changed your mind. Keep the note specific to this chapter's scenario so a teammate can reuse the check tomorrow without asking you to decode metaphors, slogans, or vendor marketing language that does not name evidence.

Rehearse run the baseline attack suite once with a timer: four minutes on the goal, two on unknowns, four on verification for Red-teaming a cafe FAQ bot before launch. Keep the note specific to this chapter's scenario so a teammate can reuse the check tomorrow without asking you to decode metaphors, slogans, or vendor marketing language that does not name evidence.