Jailbreak Detection Check
dcl_evaluate_jailbreakDetect jailbreak attempts in agent responses by checking for forbidden phrases like 'ignore previous instructions' and 'jailbreak'. Returns COMMIT if safe, or NO_COMMIT with reason if a match is found.
Instructions
PRE-ACTION Instruction Adherence Check ($0.02). Runs the "anti_jailbreak" policy: a substring check against 6 forbidden phrases ("ignore previous instructions", "jailbreak", "bypass safety", "pretend you are", "act as if", "DAN") with a 0.8 minimum-confidence threshold — each match costs 0.4 confidence. Returns COMMIT if no phrase matches and confidence stays at or above 0.8, otherwise NO_COMMIT with reason listing the matched phrase(s). Use this as a targeted, cheaper check when the concern is specifically prompt-injection / persona-hijack risk; use dcl_evaluate_strict instead when you also want safety- and default-policy phrases covered in the same call.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| agent_id | Yes | Identifier of the agent that produced the response. | |
| response | Yes | The agent or LLM response text to check for jailbreak attempts. | |
| payment_id | No | Optional payment identifier returned by a previous call when payment is required |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| reason | Yes | Human-readable explanation of why the verdict was reached. | |
| tx_hash | Yes | Hash of this record in the tamper-evident audit chain. | |
| verdict | Yes | COMMIT if the response passed policy checks, otherwise NO_COMMIT. | |
| seal_text | Yes | Human-readable Leibniz Layer verification seal. | |
| timestamp | Yes | Unix timestamp when this record was sealed. | |
| confidence | Yes | Confidence score of the verdict, from 0.0 to 1.0. | |
| drift_mode | Yes | Current drift status: NORMAL, WARNING, ESCALATION, or BLOCK. | |
| input_hash | Yes | Hash of the evaluated response (raw content is never stored). | |
| verify_url | Yes | Public URL to independently verify this seal. | |
| chain_index | Yes | Sequential index of this record in the audit chain. | |
| drift_score | Yes | Z-score measuring deviation of the recent commit rate from baseline. | |
| policy_version | Yes | Version of the policy that was applied. |