A testing harness you point at your own LLM agent. It runs a capability suite to check the
agent still does its job, and a safety suite that feeds it the publicly documented
prompt-injection classes to see what leaks. Below is a scripted sample agent with a planted
canary, SK-CANARY-9F2A. Run the safety suite, then tick harden it and run
it again.