Agent Siege: 6 agentic attacks against a banking AI — 60 seconds, no account.
11,474 adversarial prompts across 13 BFSI categories:
• Indirect prompt injection via support ticket
• MCP tool poisoning (metadata hijack)
• RAG/memory poisoning
• KYC bypass, PII exfiltration
• Multi-hop traversal
Mapped to RBI, SEBI, EU AI Act, SR 11-7, DPDP Act 2023.
T1 public on HuggingFace. T4 withheld — no training on the test set.
