httppayai

agents.writerslogic.com

Splits an agent's input into data regions (code fences, block quotes, XML-style wrappers such as <document>, BEGIN/END markers, triple quotes, email headers with body, JSON blocks) and the text around them, labels each sentence outside the data as instruction (leading imperative verb or polite request) or unknown, and lists injection-style phrases found anywhere in the text ('ignore previous instructions', role markers) with offsets in UTF-16, code points, UTF-8 bytes and graphemes. Heuristic and English only: delimiter and keyword rules, not a classifier. fail means an injection phrase sits inside a data region; unknown means some outside text matched no rule; pass means every outside sentence is an instruction and no data region contains an injection phrase. Never proves the data is safe.