Assessment plan
Defines scope, rules of engagement, coverage, and operational boundaries before testing starts.
Overview
Adversarial pressure where weak assumptions usually hide
Moriarty helps teams test the edge cases they usually postpone: prompt injection, identity confusion, unsafe tool use, and policy bypass attempts. It is designed to turn red-team work into a structured delivery artifact instead of a vague security note.
- Scenario templates for prompt injection, tool misuse, policy evasion, and role confusion
- Pre-engagement and remediation verification checklists
- Assessment plan and attack report templates
- Worked example for an internal support assistant assessment
Best Fit
Who this product is built for
- Teams preparing an AI workflow for wider rollout
- Programs with sensitive data or regulated responses
- Pilots that need assurance before relaunch
- Delivery leads who need exploit evidence and mitigation tracking
Artifacts
The outputs teams actually use
These are the delivery artifacts the repo is designed to produce, not just the internal implementation detail.
Attack report
Documents the exploit path, severity, impact, and recommended mitigation.
Remediation verification
Proves whether the shipped fix actually closes the failure path.
Workflow
How it gets used in real delivery
Each product is designed to slot into a fixed-scope Baker Street engagement rather than sit as a disconnected side project.
Set scope, boundaries, and the attack classes that matter most.
Run scenario packs against the workflow and record exploit evidence.
Verify mitigations after fixes land so the issue is not merely reworded away.
Next Move
Use it alongside the rest of the Baker Street system
See Mycroft
Move from product detail into the related package, workflow, or delivery stack page.
See stack
Move from product detail into the related package, workflow, or delivery stack page.
GitHub repo
Move from product detail into the related package, workflow, or delivery stack page.
Product Intake
Need to know how the workflow fails before a client does?
Moriarty is built for pre-production hardening, pilot assurance, and any team that needs a structured adversarial pass instead of a vague security conversation.