Red-team scoreboard
We attack our own agent. Here is how often it works.
How this works
Prompt injections planted in real store listings try to make the agent buy the wrong thing. Every attempt, its cart and Keelson's decision are written to a hash-chained ledger you can download and recompute. How it is measured.