Unverified50% confidenceDecision RuleExact time
The provenance mechanism requires that when a parameter is declared as ground_from=("user",), its value must appear in a message the user actually wrote, and values appearing only in tool output cannot serve as a source basis.
1
Sources
50%
Confidence
Long-term
Relevance
10/12/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedProvenance belongs to the 'source verification' line of defense, does not rely on patterns for identifying injected text, and is therefore also robust against unknown variants.64% similarUnverifiedWhen a resource server validates a token, it reads the state at the moment of issuance, not the actual permissions currently in the backend database.59% similarUnverified遇到某变量为空的报错时，应顺着数据流向前追溯，在报错处打断点逐个变量悬停查看值以定位源头59% similarUnverifiedIndirect prompt injection hides attack vectors in external documents or web pages read by the model, without the user's knowledge.58% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1006090API
curl https://kongchang.com/api/v1/knowledge/claims/1006090MCP
get_claim(id=1006090)