Why it matters

Payload splitting evades single-turn detection. Understanding shapes session defense.

Advertisement

The architecture

Turn 1: partial info.

Turn 2: more.

Turn N: combine + execute.

Payload splitting flowTurn 1harmless part ATurn 2harmless part BCombined intentharmful wholeSession-scoped classifier + trajectory monitoring detect
Payload split.
Advertisement

How it works end to end

Session-scoped detection.

Trajectory monitoring.

Refuse suspicious composition.