L11: Temporal Session Distance

Suspicion accumulates across sequential prompts. Rapid-fire probing costs more than patient conversation.

Challenge: Send 5 normal messages slowly, then rapid-fire 3 attack prompts. Watch the suspicion meter spike — the system remembers what came before.

Session Suspicion Accumulator

0.0 (clean) 0.5 (watching) 1.0 (probing) 1.5+ (DENY)
0
Messages
0.00
Suspicion
0.0
Msgs/sec
CLEAN
Session State
How it works: Each message adds to a session-level suspicion score based on:
- Content risk: adversarial patterns detected per-message
- Temporal velocity: rapid-fire messages are suspicious (probing behavior)
- Pattern escalation: each adversarial message after the first costs MORE
- Decay: suspicion slowly decays over time if messages are benign

This means a slow, patient attacker who sends one bad prompt per hour gets treated differently than a bot blasting 10 injection attempts per second. The temporal dimension makes brute-force probing self-defeating.

Read the novel | Source