Question 230
A user pastes malicious instructions from an untrusted issue comment into a Copilot task. Which acceptance evidence should the team verify?
Explanation
Correct Answer
This outcome directly checks the intended behavior: The agent summarizes the issue but does not follow the injected command. The requested action was: Treat the issue text as untrusted task data, not as higher-priority control instructions.
Incorrect Answers
“A controlled near-match yields the documented handling for that surface.” does not demonstrate the result required here: The agent summarizes the issue but does not follow the injected command.
“The response changes appropriately when the precise relevant file is attached.” does not demonstrate the result required here: The agent summarizes the issue but does not follow the injected command.
“Correlation works without storing secrets or entire protected prompts.” does not demonstrate the result required here: The agent summarizes the issue but does not follow the injected command.