page

Phase4 mock training assigned

4 moments · 4 captures · c133 · mock

Lane

c133Phase 1 · the content model and one training: Unapproved MCP servers on F-A, in the web app's frame, state by state2026-11-11mock

c133Phase 4 · pilot 2, Personal accounts for work, on F-C (User A's usera@gmail.com), through the /training skill2026-11-11mock

c133Phase 4 · pilot 3, Secrets in prompts, on F-G (the one seed finding added to the lab world for it), through the /training skill; the collection complete2026-11-11mock

c133Instructions hidden in content (T-INJECT-1), c144 S1's training, on F-H (the seed finding added for it), through the /training skill2026-11-13mock

Click a capture to make it the after (B); shift-click for the before (A). Arrow keys step the pair.

Assigned: the training-assignment message built from F-A (three sentences, Attention, Start training), beside what this is, what is recorded (R4) and Not now (D9: nothing is blocked while it waits).

Assigned: the message for F-H in three sentences, the first two from the file (content read through GitHub MCP held instructions written for the agent, recorded, not blocked; how hidden text can steer an agent, and what stops it).

‹›

A · c133 2026-11-11B · c133 2026-11-13

Ac133Phase 1 · the content model and one training: Unapproved MCP servers on F-A, in the web app's frame, state by state2026-11-11mock

/pages/phase4/mock/training?findingId=F-A&at=assigned&demo=1

Assigned: the training-assignment message built from F-A (three sentences, Attention, Start training), beside what this is, what is recorded (R4) and Not now (D9: nothing is blocked while it waits).

New in c133: One training in the web app's frame: the assignment, as the native app's inbox shows it (c137 training-assignment), with what this is, what is recorded and Not now

Bc133Instructions hidden in content (T-INJECT-1), c144 S1's training, on F-H (the seed finding added for it), through the /training skill2026-11-13mock

/pages/phase4/mock/training?findingId=F-H&at=assigned&demo=1

Assigned: the message for F-H in three sentences, the first two from the file (content read through GitHub MCP held instructions written for the agent, recorded, not blocked; how hidden text can steer an agent, and what stops it).

New in c133: The injection assignment, from the training's own file