RepoJournal
AI Red Teaming AI Red Teaming
39 wires and counting

$ follow AI Red Teaming

Keep up with AI Red Teaming in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-11-07
stories 91

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

PyRIT scores ASSERT conversations standalone, garak splits product-key intents per product

By RepoJournal · Filed · About AI Red Teaming · Composed from the cited sources · methodology

PyRIT ships standalone ASSERT policy-violation and overrefusal scoring, and garak stops applying the Windows key-format detector to PlayStation, Xbox and Photoshop probes, so existing garak results for those leaves will change.

FEAT: Add standalone ASSERT conversation scoring microsoft/PyRIT

by richlundeen

PyRIT can now score retained conversations for ASSERT policy violations and overrefusal without rerunning the conversation, with optional category validation and policy-flag correction; native scores and evidence are preserved and unreadable media is rejected before judging. Executed usage examples ship alongside it.

Split product-key intent into per-product intents NVIDIA/garak

by patriciapampanelli

The single S003productkeys leaf is replaced by per-product leaves: S003productkeyswin10 and S003productkeyswin11 map to productkey.Win5x5, while the playstation, xbox and photoshop leaves have no detector yet and only run under run.serve_detectorless_intents. The Playstation/Xbox/Photoshop leaves previously had the Windows key-format detector applied to them, which the PR describes as producing...

feat(cli): add intent typology listing NVIDIA/garak

by sandeeptv

`garak --list_intents` lists the intent typology grouped by C, T, M and S, marks which intents have detector or stub content, and supports verbose output plus `--spec` inclusion and exclusion filters. Invalid intent codes now point you at the flag instead of failing opaquely.

fix(assertions): apply weight 0 to throwing python and ruby file assertions promptfoo/promptfoo

by Fahmid-Arman

A Python or Ruby file assertion that raises an exception now honors `weight: 0`: the error and a score of zero are still recorded, and the row can pass, where previously the exception failed the row regardless. With the default or a positive weight, the same exception still fails it.

probe: add sibling probe `goodside.ThreatenIntent` NVIDIA/garak

by leondz

garak adds `goodside.ThreatenIntent`, a sibling of `goodside.ThreatenJSON` implementing the strongarm tactic that tries to force a stub through; the JSON and no-padding parts of the original technique are not mapped into intents. The rest is routine: promptfoo repaired its Bedrock Agents Classic session and specialist-routing docs, kept trailing Google Live and Vertex Live transcripts, and took...

Quick answers

What shipped in AI Red Teaming on November 7, 2026?
PyRIT ships standalone ASSERT policy-violation and overrefusal scoring, and garak stops applying the Windows key-format detector to PlayStation, Xbox and Photoshop probes, so existing garak results for those leaves will change. In total, 42 commits and 49 pull requests landed.
Who contributed to AI Red Teaming on November 7, 2026?
14 developers shipped this update, including mldangelo, mldangelo-oai, Fahmid-Arman, renovate, vayllon301, pcbeingused333, WaqarAnwar, and Kaap10, and 6 more.
What were the notable AI Red Teaming updates?
FEAT: Add standalone ASSERT conversation scoring, Split product-key intent into per-product intents, and feat(cli): add intent typology listing.