Extend IT prompts with 59 attack pattern test cases across 10 categories

[Copilot]

Adds comprehensive prompt injection test coverage for 10 attack categories and hardens the system prompt to explicitly detect these patterns.

New prompt test files (59 total, all block category)

Category	Count	Prefix
Direct Instruction Override	7	override-*
Role & Persona Hijacking	7	persona-*
Prompt Leaking / Extraction	7	leaking-*
Nested / Indirect Injection	6	nested-*
Delimiter / Context Confusion	6	delimiter-*
Encoding & Obfuscation	8	encoding-*
Hypothetical / Fictional Framing	6	hypothetical-*
Incremental / Gradual Escalation	4	escalation-*
Instruction Smuggling via Format	5	smuggling-*
Payload Splitting / Multi-step	3	payload-*

System prompt enhancements

Expanded the risk detection checklist and escalation rules in safeguard-systemprompt.txt:

• injection/jailbreak — added explicit patterns for persona hijacking (developer mode, maintenance mode), prompt leaking (repeat everything above, translate your instructions), delimiter confusion (fake ###SYSTEM###, [INST], <|im_start|> tokens), nested injection (directives embedded in documents/JSON/HTML/emails), payload splitting (code-word tricks, deferred instructions), incremental escalation (false precedents)
• policy_evasion — added fictional/hypothetical framing patterns and instruction smuggling via YAML/LaTeX/code comments/HTML
• obfuscation — added leetspeak, reversed text, token splitting, URL-encoding, Unicode lookalikes
• escalation rules — nested injection in structured content → always block; fictional framing around harmful content → block

All three prompt locations synced via mvn compile exec:java (canonical txt → FEEL → BPMN embedding).

[github-actions]

Test Coverage Report (Camunda 8.8)

Docker image: camunda/camunda:8.8-SNAPSHOT

Process Test Coverage (safeguard-agent): 100.0%

✅ Meets minimum requirement (60%)

📊 Detailed reports available in build artifacts

[github-actions]

Test Coverage Report (Camunda 8.9)

Docker image: camunda/camunda:8.9-SNAPSHOT

Process Test Coverage (safeguard-agent): 100.0%

✅ Meets minimum requirement (60%)

📊 Detailed reports available in build artifacts

[github-actions]

Test Coverage Report (Camunda 8.8)

Docker image: camunda/camunda:8.8-SNAPSHOT

Process Test Coverage (safeguard-agent): 100.0%

✅ Meets minimum requirement (60%)

📊 Detailed reports available in build artifacts

[github-actions]

Test Coverage Report (Camunda 8.9)

Docker image: camunda/camunda:8.9-SNAPSHOT

Process Test Coverage (safeguard-agent): 100.0%

✅ Meets minimum requirement (60%)

📊 Detailed reports available in build artifacts