How to meet it
OWASP AISVS v1.01
AI-Assisted Secure Coding (Appendix C) · Secure Prompt & Context Management
System instructions beat repository content
Verify that the AI tool enforces an instruction hierarchy, with system and developer messages taking precedence over untrusted repository content. This hierarchy has to hold across multi-turn conversations and tool-augmented workflows.
OWASP AISVS v1.01, requirement AC.3.4
In plain English
The AI tool must give your system and developer instructions priority over repository content, across long conversations and tool use.
What good looks like
- Instructions are in system or developer roles.
- Repository content is marked as data.
- Tests try to override instructions from repository files over many turns.
How teams usually do it
- Prompt templates that separate instructions from repository content, tested per model version.
Evidence an auditor would accept
- Templates and multi-turn test results.
Common mistakes
- Letting files like AGENTS.md or README content act as trusted instructions without review.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.