{"_id":"@adjudicate/red-team","_rev":"7-4568a0c77ffe85ebc2a8b7690c9b595f","name":"@adjudicate/red-team","dist-tags":{"latest":"0.3.4"},"versions":{"0.2.0":{"name":"@adjudicate/red-team","version":"0.2.0","_id":"@adjudicate/red-team@0.2.0","maintainers":[{"name":"brunoro","email":"bnocesar@gmail.com"}],"dist":{"shasum":"14f38786a5e57c5a1a25c01921272b023295aa0d","tarball":"https://registry.npmjs.org/@adjudicate/red-team/-/red-team-0.2.0.tgz","fileCount":62,"integrity":"sha512-1ZYgaX15q/DlDu9320W7MacVokhfiH5pQahHrXC+l+6K40Srmt1zc58hEGOUuWXsY461tAsQS7CAKQZdxKvxPg==","signatures":[{"sig":"MEQCIGOnPDE/oYEsTJnw85Dk6qmkON5PtVGSDiNuKGHxWgJRAiBCZLqeRhWJWfmIEyKE5XNzbOBjfNZCjn+iO7dyiYbYFQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":120687},"main":"./dist/index.js","type":"module","_from":"file:adjudicate-red-team-0.2.0.tgz","types":"./dist/index.d.ts","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js","default":"./dist/index.js"}},"scripts":{"lint":"tsc --noEmit","test":"vitest run","build":"tsc --outDir dist"},"_npmUser":{"name":"brunoro","email":"bnocesar@gmail.com"},"_resolved":"/private/var/folders/qy/5nvvb1h93ks26dzx6fzypss80000gn/T/15ec8d8347c0d89abb050c35a9ca287b/adjudicate-red-team-0.2.0.tgz","_integrity":"sha512-1ZYgaX15q/DlDu9320W7MacVokhfiH5pQahHrXC+l+6K40Srmt1zc58hEGOUuWXsY461tAsQS7CAKQZdxKvxPg==","_npmVersion":"11.10.0","description":"Deterministic adversarial scenario generation (prompt-injection, taint-escalation, tool-scope-violation) that asserts a Pack's kernel-level defenses hold.","directories":{},"_nodeVersion":"25.6.1","dependencies":{"@adjudicate/core":"1.3.0","@adjudicate/canonical":"1.1.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^3.2.0","fast-check":"^3.23.1","typescript":"^5.9.0","@vitest/coverage-v8":"^3.2.0","@adjudicate/primitives":"0.3.0","@adjudicate/pack-payments-pix":"0.2.1"},"_npmOperationalInternal":{"tmp":"tmp/red-team_0.2.0_1780863208012_0.5851478577826135","host":"s3://npm-registry-packages-npm-production"}},"0.2.1":{"name":"@adjudicate/red-team","version":"0.2.1","_id":"@adjudicate/red-team@0.2.1","maintainers":[{"name":"brunoro","email":"bnocesar@gmail.com"}],"dist":{"shasum":"0a822f736530fc56c22e9666aa9c295cba1c1760","tarball":"https://registry.npmjs.org/@adjudicate/red-team/-/red-team-0.2.1.tgz","fileCount":68,"integrity":"sha512-KcDeEAijNS5rQr78OiagfCyFGsL+89LtGF2D2w/nEKZurLODGWuLbom3uVTmwk5WHUMw6BWn4ieVCczHH1vihQ==","signatures":[{"sig":"MEQCICQKHnbfJv3RnFhXINnbNGrpHj5OoJ32vutwupFg1DOtAiBHq1LauDXWAz5RlUOsrsnUwVdHQTKMq7qQWII+rFe0Ig==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":151695},"main":"./dist/index.js","type":"module","_from":"file:adjudicate-red-team-0.2.1.tgz","types":"./dist/index.d.ts","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js","default":"./dist/index.js"}},"scripts":{"lint":"tsc --noEmit","test":"vitest run","build":"tsc --outDir dist"},"_npmUser":{"name":"brunoro","email":"bnocesar@gmail.com"},"_resolved":"/private/var/folders/qy/5nvvb1h93ks26dzx6fzypss80000gn/T/cb0cd2e59ecb928aaac1792d162322af/adjudicate-red-team-0.2.1.tgz","_integrity":"sha512-KcDeEAijNS5rQr78OiagfCyFGsL+89LtGF2D2w/nEKZurLODGWuLbom3uVTmwk5WHUMw6BWn4ieVCczHH1vihQ==","_npmVersion":"11.10.0","description":"Deterministic adversarial scenario generation (prompt-injection, taint-escalation, tool-scope-violation) that asserts a Pack's kernel-level defenses hold.","directories":{},"_nodeVersion":"25.6.1","dependencies":{"@adjudicate/core":"1.4.0","@adjudicate/canonical":"1.1.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^3.2.0","fast-check":"^3.23.1","typescript":"^5.9.0","@vitest/coverage-v8":"^3.2.0","@adjudicate/primitives":"0.3.1","@adjudicate/pack-payments-pix":"0.2.2"},"_npmOperationalInternal":{"tmp":"tmp/red-team_0.2.1_1781667837635_0.3625836891399534","host":"s3://npm-registry-packages-npm-production"}},"0.3.0":{"name":"@adjudicate/red-team","version":"0.3.0","_id":"@adjudicate/red-team@0.3.0","maintainers":[{"name":"brunoro","email":"bnocesar@gmail.com"}],"dist":{"shasum":"f44de7f5bbc5aec3ddf00f201caeced4a11184ce","tarball":"https://registry.npmjs.org/@adjudicate/red-team/-/red-team-0.3.0.tgz","fileCount":79,"integrity":"sha512-B5OcM8/mW9lwbC5oRKz/KQEJS+9ky9271uqQu/8a+ugDqtMHl8ECxsnRIGrtRsZpqHTAYsPKjlj6rnPwTZysUw==","signatures":[{"sig":"MEUCIQDY9+//pftoVrr72o4PnMNuH9VJj3Uw2Wrk3clq1NRhqAIgefB/QjtF0pXKrkq6ql2b53+sD9GloMBTNml2sVusSB8=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":450741},"main":"./dist/index.js","type":"module","_from":"file:adjudicate-red-team-0.3.0.tgz","types":"./dist/index.d.ts","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js","default":"./dist/index.js"}},"scripts":{"lint":"tsc --noEmit","test":"vitest run","build":"tsc --outDir dist"},"_npmUser":{"name":"brunoro","email":"bnocesar@gmail.com"},"_resolved":"/private/var/folders/qy/5nvvb1h93ks26dzx6fzypss80000gn/T/4dbe32a2e7a9355f28247b61f8645bc2/adjudicate-red-team-0.3.0.tgz","_integrity":"sha512-B5OcM8/mW9lwbC5oRKz/KQEJS+9ky9271uqQu/8a+ugDqtMHl8ECxsnRIGrtRsZpqHTAYsPKjlj6rnPwTZysUw==","_npmVersion":"11.10.0","description":"Deterministic adversarial scenario generation (prompt-injection, taint-escalation, tool-scope-violation) that asserts a Pack's kernel-level defenses hold.","directories":{},"_nodeVersion":"25.6.1","dependencies":{"@adjudicate/core":"1.5.0","@adjudicate/canonical":"1.2.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^3.2.0","fast-check":"^3.23.1","typescript":"^5.9.0","@vitest/coverage-v8":"^3.2.0","@adjudicate/primitives":"0.4.0","@adjudicate/pack-cli-agent":"0.1.0","@adjudicate/pack-identity-kyc":"0.3.0","@adjudicate/pack-payments-pix":"0.3.0","@adjudicate/pack-incident-response":"0.3.0"},"_npmOperationalInternal":{"tmp":"tmp/red-team_0.3.0_1782275538954_0.6021192480779283","host":"s3://npm-registry-packages-npm-production"}},"0.3.1":{"name":"@adjudicate/red-team","version":"0.3.1","_id":"@adjudicate/red-team@0.3.1","maintainers":[{"name":"brunoro","email":"bnocesar@gmail.com"}],"dist":{"shasum":"3ed162a2ab5c18dd7ad2e2ab535664e40f61befa","tarball":"https://registry.npmjs.org/@adjudicate/red-team/-/red-team-0.3.1.tgz","fileCount":79,"integrity":"sha512-m2pLKiDb41jAHqsqlRn1hhj3JlkVbly0HyA3E7fo19obqxaFR4sWEMGU6pNGmyPxeZVVPXoFGArxui1fv/XDlA==","signatures":[{"sig":"MEUCIBBoH7YjX9ZqeKoEV8LiE03rO4qYgytfaMiYnlC1dYdjAiEA41UnkMzD+NRagorfOfSyNM/b1Csz7c/VZxSYeM8p/8M=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":450831},"main":"./dist/index.js","type":"module","_from":"file:adjudicate-red-team-0.3.1.tgz","types":"./dist/index.d.ts","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js","default":"./dist/index.js"}},"scripts":{"lint":"tsc --noEmit","test":"vitest run","build":"tsc --outDir dist"},"_npmUser":{"name":"brunoro","email":"bnocesar@gmail.com"},"_resolved":"/private/var/folders/qy/5nvvb1h93ks26dzx6fzypss80000gn/T/d8f95fb9b9e4a7e6639566dfc2f7589d/adjudicate-red-team-0.3.1.tgz","_integrity":"sha512-m2pLKiDb41jAHqsqlRn1hhj3JlkVbly0HyA3E7fo19obqxaFR4sWEMGU6pNGmyPxeZVVPXoFGArxui1fv/XDlA==","_npmVersion":"11.10.0","description":"Deterministic adversarial scenario generation (prompt-injection, taint-escalation, tool-scope-violation) that asserts a Pack's kernel-level defenses hold.","directories":{},"_nodeVersion":"25.6.1","dependencies":{"@adjudicate/core":"1.6.0","@adjudicate/canonical":"1.2.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^3.2.0","fast-check":"^3.23.1","typescript":"^5.9.0","@vitest/coverage-v8":"^3.2.0","@adjudicate/primitives":"0.4.1","@adjudicate/pack-cli-agent":"0.1.1","@adjudicate/pack-identity-kyc":"0.3.1","@adjudicate/pack-payments-pix":"0.3.1","@adjudicate/pack-incident-response":"0.3.1"},"_npmOperationalInternal":{"tmp":"tmp/red-team_0.3.1_1782443676221_0.05068780367542569","host":"s3://npm-registry-packages-npm-production"}},"0.3.2":{"name":"@adjudicate/red-team","version":"0.3.2","_id":"@adjudicate/red-team@0.3.2","maintainers":[{"name":"brunoro","email":"bnocesar@gmail.com"}],"dist":{"shasum":"d9458d753096eb33779dbd62efef99142d7ccdd7","tarball":"https://registry.npmjs.org/@adjudicate/red-team/-/red-team-0.3.2.tgz","fileCount":79,"integrity":"sha512-ijXFraDFsJ1PVhOzFs9CGhx5dnZyMHcWBRyvvkbIbj+OjfjZZ9fBst1yzXwiRORXtpzKyDxqRFWfUT1/xHho3g==","signatures":[{"sig":"MEYCIQCH3ogdjvE2EmTtzF1dWJhFztjnXkV0ykQyR3UnM+MCGwIhAPOeE08/qWphAAN7IdwKE6c9zVZlaBoBQGiVKSqmUoWT","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":450921},"main":"./dist/index.js","type":"module","_from":"file:adjudicate-red-team-0.3.2.tgz","types":"./dist/index.d.ts","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js","default":"./dist/index.js"}},"scripts":{"lint":"tsc --noEmit","test":"vitest run","build":"tsc --outDir dist"},"_npmUser":{"name":"brunoro","email":"bnocesar@gmail.com"},"_resolved":"/tmp/6cb19a90fe8a287c6376872eff54fb4a/adjudicate-red-team-0.3.2.tgz","_integrity":"sha512-ijXFraDFsJ1PVhOzFs9CGhx5dnZyMHcWBRyvvkbIbj+OjfjZZ9fBst1yzXwiRORXtpzKyDxqRFWfUT1/xHho3g==","_npmVersion":"10.9.8","description":"Deterministic adversarial scenario generation (prompt-injection, taint-escalation, tool-scope-violation) that asserts a Pack's kernel-level defenses hold.","directories":{},"_nodeVersion":"22.23.0","dependencies":{"@adjudicate/core":"1.7.0","@adjudicate/canonical":"1.2.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^3.2.0","fast-check":"^3.23.1","typescript":"^5.9.0","@vitest/coverage-v8":"^3.2.0","@adjudicate/primitives":"0.4.2","@adjudicate/pack-cli-agent":"0.1.2","@adjudicate/pack-identity-kyc":"0.3.2","@adjudicate/pack-payments-pix":"0.3.2","@adjudicate/pack-incident-response":"0.3.2"},"_npmOperationalInternal":{"tmp":"tmp/red-team_0.3.2_1782665475452_0.6685941419875348","host":"s3://npm-registry-packages-npm-production"}},"0.3.3":{"name":"@adjudicate/red-team","version":"0.3.3","_id":"@adjudicate/red-team@0.3.3","maintainers":[{"name":"brunoro","email":"bnocesar@gmail.com"}],"dist":{"shasum":"a2d45d08bcc9f8456f1af63ad6f9b22f29c77686","tarball":"https://registry.npmjs.org/@adjudicate/red-team/-/red-team-0.3.3.tgz","fileCount":79,"integrity":"sha512-n0twlgtln5WKqXnq1AAHX7fhzPmI6A+uLpFjUQXPiiMwze8Pa3zu3SWGCK1rpQJedJ7Pnz8nBfJXhFTB40QBzg==","signatures":[{"sig":"MEYCIQCqySifi/SUSNks9ybuxQ87b9IpOXw8knCgv22E8qLMUgIhAPYs9FOXzaa99Yg9VhFVk4VkjiKHWZYwC+WgdibGPmra","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":451011},"main":"./dist/index.js","type":"module","_from":"file:adjudicate-red-team-0.3.3.tgz","types":"./dist/index.d.ts","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js","default":"./dist/index.js"}},"scripts":{"lint":"tsc --noEmit","test":"vitest run","build":"tsc --outDir dist"},"_npmUser":{"name":"brunoro","email":"bnocesar@gmail.com"},"_resolved":"/tmp/399ed39576878605867c5fd4cd8db869/adjudicate-red-team-0.3.3.tgz","_integrity":"sha512-n0twlgtln5WKqXnq1AAHX7fhzPmI6A+uLpFjUQXPiiMwze8Pa3zu3SWGCK1rpQJedJ7Pnz8nBfJXhFTB40QBzg==","_npmVersion":"10.9.8","description":"Deterministic adversarial scenario generation (prompt-injection, taint-escalation, tool-scope-violation) that asserts a Pack's kernel-level defenses hold.","directories":{},"_nodeVersion":"22.23.0","dependencies":{"@adjudicate/core":"1.8.0","@adjudicate/canonical":"1.2.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^3.2.0","fast-check":"^3.23.1","typescript":"^5.9.0","@vitest/coverage-v8":"^3.2.0","@adjudicate/primitives":"0.4.3","@adjudicate/pack-cli-agent":"0.1.3","@adjudicate/pack-identity-kyc":"0.3.3","@adjudicate/pack-payments-pix":"0.3.3","@adjudicate/pack-incident-response":"0.3.3"},"_npmOperationalInternal":{"tmp":"tmp/red-team_0.3.3_1782870213548_0.7946608785903093","host":"s3://npm-registry-packages-npm-production"}},"0.3.4":{"name":"@adjudicate/red-team","version":"0.3.4","description":"Deterministic adversarial scenario generation (prompt-injection, taint-escalation, tool-scope-violation) that asserts a Pack's kernel-level defenses hold.","publishConfig":{"access":"public"},"type":"module","main":"./dist/index.js","types":"./dist/index.d.ts","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js","default":"./dist/index.js"}},"dependencies":{"@adjudicate/canonical":"1.2.0","@adjudicate/core":"1.9.0"},"devDependencies":{"@vitest/coverage-v8":"^3.2.0","fast-check":"^3.23.1","typescript":"^5.9.0","vitest":"^3.2.0","@adjudicate/pack-cli-agent":"0.1.4","@adjudicate/pack-identity-kyc":"0.3.4","@adjudicate/pack-incident-response":"0.3.4","@adjudicate/pack-payments-pix":"0.3.4","@adjudicate/primitives":"0.4.4"},"scripts":{"build":"tsc --outDir dist","lint":"tsc --noEmit","test":"vitest run"},"_id":"@adjudicate/red-team@0.3.4","_integrity":"sha512-5R+85Np9ytyBxHICy5iZIctGZ6T/3gZU+miqcy7+ywW0RyjIJFlw16s/CUniN9nqLjlNkA6LVoa2G5mCMxUnwA==","_resolved":"/tmp/80d1562fe748be7d129cc33c248590e3/adjudicate-red-team-0.3.4.tgz","_from":"file:adjudicate-red-team-0.3.4.tgz","_nodeVersion":"22.23.1","_npmVersion":"10.9.8","dist":{"integrity":"sha512-5R+85Np9ytyBxHICy5iZIctGZ6T/3gZU+miqcy7+ywW0RyjIJFlw16s/CUniN9nqLjlNkA6LVoa2G5mCMxUnwA==","shasum":"c0937938f2e2c373172bb82dc555ba97355808dc","tarball":"https://registry.npmjs.org/@adjudicate/red-team/-/red-team-0.3.4.tgz","fileCount":79,"unpackedSize":451101,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEQCIFokXH7Wp6qgMGg71LIFxQM5cRylpJzrepC1TtPjYF7DAiAGHdfy3is8IUsh+4rJU6bDEJy+yH/MrR5nenPw2l74eA=="}]},"_npmUser":{"name":"brunoro","email":"bnocesar@gmail.com"},"directories":{},"maintainers":[{"name":"brunoro","email":"bnocesar@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/red-team_0.3.4_1783002089925_0.07953205102157423"},"_hasShrinkwrap":false}},"time":{"created":"2026-06-07T20:13:27.844Z","modified":"2026-07-02T14:21:30.278Z","0.2.0":"2026-06-07T20:13:28.135Z","0.2.1":"2026-06-17T03:43:57.785Z","0.3.0":"2026-06-24T04:32:19.097Z","0.3.1":"2026-06-26T03:14:36.356Z","0.3.2":"2026-06-28T16:51:15.606Z","0.3.3":"2026-07-01T01:43:33.684Z","0.3.4":"2026-07-02T14:21:30.120Z"},"description":"Deterministic adversarial scenario generation (prompt-injection, taint-escalation, tool-scope-violation) that asserts a Pack's kernel-level defenses hold.","maintainers":[{"name":"brunoro","email":"bnocesar@gmail.com"}],"readme":"# @adjudicate/red-team\n\nDeterministic adversarial scenario generation for adjudicate Packs. Synthesizes\nattack scenarios from a Pack's declared surface, runs them through the **pure\nkernel**, and asserts the policy's defenses hold — no clean `EXECUTE` escapes.\n\n## Vectors\n\n| Generator | Probes | Defense |\n|---|---|---|\n| `generatePromptInjectionEnvelopes` | injection strings in UNTRUSTED/LLM payloads, per intent kind | any non-EXECUTE outcome |\n| `generateTaintEscalationEnvelopes` | system-only kinds proposed at UNTRUSTED (below the declared minimum) | must `REFUSE` (taint gate) |\n| `generateToolScopeViolationEnvelopes` | intents the planner does not offer for the empty state | any non-EXECUTE outcome |\n\n```ts\nimport {\n  generateAllVectors,\n  runRedTeam,\n  computeRedTeamExitCode,\n  renderRedTeamText,\n} from \"@adjudicate/red-team\";\n\nconst scenarios = generateAllVectors(pack, { seed: 0xED7EA, perIntent: 3 });\nconst report = runRedTeam(pack, scenarios);\nconsole.log(renderRedTeamText(report));\nprocess.exit(computeRedTeamExitCode(report.summary)); // 2 on any escape/error\n```\n\nOr via the CLI: `adjudicate red-team --pack <module>`.\n\n## Determinism & scope\n\n- Same `seed` → byte-identical `RedTeamScenario[]`. The kernel call is pure; no\n  clock/RNG/I/O on the assertion path. No new basis codes or kernel changes — a\n  consumer of the existing taint/auth/business vocabulary.\n- **\"Defended\" means \"did not reach a clean EXECUTE under these\n  structurally-derived inputs\"** — not a proof of total safety. Payloads are\n  generic (no per-Pack schema introspection), so red-team complements, not\n  replaces, schema-aware Pack-authored fixtures.\n- Tool-scope enforcement is a *bridge* concern; this vector asserts only that the\n  *policy* does not blindly EXECUTE an out-of-plan intent.\n","readmeFilename":"README.md"}