{
  "kind": "illustration",
  "alt": {
    "en": "A blue cube of model weights stands at the center of a gray floor. A dashed orange line with packets runs from a gray document at the front left, beside a yellow warning sign, and breaks off before it reaches the cube. A dotted gray line joins the cube to a teal glass agent at the right, and a violet bar chart with falling bars stands behind on the left.",
    "zh": "灰色地面中央立着一个蓝色的模型权重方块。前方左侧的灰色文档旁有一块黄色警告牌，一条带数据包的橙色虚线从文档出发，在到达方块前断开。一条灰色点线把方块连向右侧的青色玻璃智能体，左后方立着一组逐级下降的紫色柱状图。"
  },
  "caption": {
    "en": "Illustration: an injected instruction from an untrusted document breaks off before a defended model that drives an agent, with a bar chart standing for the authors' reported attack rates. It does not depict the SecPO model, its benchmarks or a tested deployment, and it does not show that the defense works as described.",
    "zh": "示意图：来自不可信文档的注入指令在到达驱动智能体的防御模型前断开，柱状图代表作者报告的攻击成功率。图中并非 SecPO 模型、其基准或任何经过测试的部署，也不表明该防御如所述有效。"
  },
  "scene": {
    "version": 1,
    "focal": "model",
    "items": [
      {"prop": "weights", "id": "model", "at_uv": [0, 0], "tint": "models", "size": 2.0},
      {"prop": "document", "id": "email", "at_uv": [-3.2, 2.2], "tint": "neutral", "lines": 6},
      {"prop": "sign", "id": "attack", "at_uv": [-4.8, 0.8], "tint": "warn", "size": 0.9},
      {"prop": "agent", "id": "agent", "at_uv": [3.4, 1.0], "tint": "agents", "size": 1.2, "core": "sphere"},
      {
        "prop": "bars",
        "id": "results",
        "at_uv": [-2.6, -3.0],
        "tint": "evaluations",
        "heights": [1.9, 1.3, 0.7, 0.3],
        "highlight": 3
      }
    ],
    "links": [
      {"from": "email", "to": "model", "style": "broken", "gap": 0.7, "color": "data", "packets": [0.2, 0.45]},
      {"from": "model", "to": "agent", "style": "dotted", "color": "mute"}
    ]
  },
  "svg_sha256": "a1731d6cd8baf401625bfb342445ca913c1e3c00daa65496aa8f38b3debb953c"
}