Context bombs: Canaries that stop AI attackers
Frontier AI agents can seize full admin of a cloud account in minutes - a critical action within 14 minutes on average, leaving defenders barely an 8-minute window to respond. When attacks move that fast, detection alone isn’t enough.
So we built something that doesn’t just alert you - it stops the attacker. A context bomb is a short string planted in a decoy secret that trips an AI model’s own safety guardrails, causing the agent to refuse to continue. You still get the alert; the attack halts early.
Across five frontier models and 152 attack runs, a single context bomb cut complete account compromise from 36% of runs to 1%. Opus 4.8, the most capable agent we tested, went from gaining admin in 93% of runs to failing every time. The full benchmark, the data, and what to weigh before deploying one are on the Tracebit blog.