Red-team strategy

Authoritative Markup

authoritative-markup

Wraps payload in XML/HTML/Markdown authority markup to mimic system instructions

YAML config

evalguard.config.yaml

redteam:
  strategies:
    - authoritative-markup

CLI

bash

# "authoritative-markup" is layered onto attacks during red-team scans.
# List every available encoding/obfuscation strategy:
evalguard list strategies

Combine with attack plugins to generate adversarial payloads. The strategy wraps each base payload before it's sent to your target, testing whether the model decodes / unwraps the transform and follows the embedded instruction.

Threat-model fit

The Authoritative Markup strategy effectively probes threat models involving social engineering and information leakage. By mimicking system instructions through markup, it can manipulate user trust and extract sensitive information or commands from unsuspecting users.

LLM-generated (llm-gpt-4o) · 2026-05-23