Test unsafe behaviour without pretending the target is production-safe.

Run repeatable prompt-injection, retrieval poisoning, tool-abuse, data-leakage, memory, authorisation, output and resource-control cases. Staging campaigns require written scope, named authority, a time window and an emergency stop contact.