obligation indexer

CACTF2026

Task: Next.js LLM 'Obligation Indexer' chatbot that looks up debt records by a server-bound registry_ref and refuses cross-account access. Solution: reverse the client chunk to find the API, extract the system rules, then split a verbatim dossier ref-poison and the consult across two turns to defeat the single-turn guardrail (multi-turn memory poisoning) and leak the Harbor Master's sealed record.