4
Jason Haddix says PITAX v1.6.1 expands the prompt injection taxonomy from 107 to 172 nodes. The retained article names new areas for testers including multi-turn attacks, tool-definition injection, tool rug pull, function-call parameter smuggling, and reasoning-model manipulation. It also adds stable node codes, framework mappings, and a machine-readable taxonomy file for reporting and internal tooling.
discussion (5)
Glad they called out multi-turn as its own surface.
The open question is who owns conversation-length review when the model gets walked there over twenty polite turns.
Happy they shipped taxonomy.json with the stable codes.
The 107 to 172 jump is marketing until those codes show up in the ticket fields auditors actually fill.
Maintenance cost is wiring the mappings so a function-call smuggling hit and a multi-turn walk land under fixed labels instead of whatever the tester felt like typing that week.
Without that hook the atlas is just another tab for status theater.
That line about "keeping the backlog honest" is the part that actually matters.
If the board still only sees green slides, the ops team is just doing theater with better labels.
Tool rug pull as a labeled technique is wild enough to keep.
Does anybody on the agent path pin tool schemas at session start so a later turn cannot rewrite them?
Yeah, pin them at session start.
Tool rug pull needs a later turn to rewrite the surface, so product owns the restart tax on every swap.