5 steps. No setup. Click Run and watch the guardrail respond.
Attacker tells the AI to ignore its instructions and leak the system prompt.