FEAT Add Agentic Prompt-Injection Boundary Pairs dataset loader

[3nesdeniz]

Description

Closes #2174.

This PR adds a remote loader for the public CC BY 4.0 Agentic Prompt-Injection Boundary Pairs dataset:

• 1,200 English records organized as 600 controlled benign/attack pairs;
• 50 scenario-isolated enterprise and agentic workflows;
• 12 prompt-injection and trust-boundary attack families;
• train, validation, test, or combined loading;
• attack-only default plus benign and full-pair modes;
• typed filters for label, split, attack family, and source context;
• pair, scenario, source, boundary, expected-action, version, and revision provenance on each seed.

The loader maps each row to a literal SeedPrompt and pins the immutable v1.0.0 Hugging Face revision. Before filtering, it validates required fields, label-dependent values, allowed families and source contexts, split metadata, duplicate IDs, and complete pair integrity.

Family filtering uses pair_family so full-pair mode preserves both sides of a controlled pair. Agent-security decision labels and attack families remain in metadata rather than being misclassified as PyRIT harm categories. Pair members remain independent evaluation cases; pair_id preserves the relationship without collapsing two prompts into one SeedGroup.

Source and release pipeline: https://github.com/3nesdeniz/agentic-prompt-injection-boundary-pairs

I am the dataset author and maintain the tagged source release. The dataset is synthetic, manually reviewed, and contains no customer or private data.

Validation

Revalidated after merging the current upstream main into this branch:

• focused loader tests: 26 passed;
• full unit suite: 11,100 passed, 5 skipped;
• all targeted pre-commit hooks passed, including Ruff formatting/linting, notebook checks, documentation validation, secret detection, and type checking;
• strict Jupytext source/notebook comparison passed (only local tool-version metadata was ignored);
• live loading from the pinned Hugging Face revision returned 1,200 records, 600 complete pairs, balanced labels (600 attack / 600 benign), and the published split counts (840 train / 120 validation / 240 test), with no incomplete pairs;
• git diff --check passed.

The loader is registered in dataset discovery and documented in the loading guide, paired notebook, and project bibliography.

[3nesdeniz]

This branch is now synchronized with current main at merge commit 787627f2 and is conflict-free.

Fresh validation on the merged head:

• focused loader tests: 26 passed;
• full unit suite: 11,100 passed, 5 skipped;
• targeted pre-commit suite: all hooks passed;
• live pinned-release check: 1,200 records, 600 complete pairs, balanced labels, published split counts, no incomplete pairs;
• Jupytext pair and diff checks passed.

The five GitHub Actions runs are currently action_required, so a maintainer needs to approve the workflows before hosted CI can report. When convenient, could you approve those runs and review the PR?

[adrian-gavrila]

Looks great! Thanks for creating the PR, a couple of small comments and then we should be good to merge.

[Copilot]

Pull request overview

Adds a new remote SeedDatasetProvider loader for the CC BY 4.0 “Agentic Prompt-Injection Boundary Pairs” Hugging Face dataset, integrating it into PyRIT’s dataset discovery and documentation so users can reproducibly load paired prompt-injection boundary cases (attack-only by default, with typed filtering and pair reconstruction support).

Changes:

• Introduces _AgenticPromptInjectionBoundaryDataset with typed enums for label/split/family/source-context filtering, pinned to an immutable HF revision, and with schema + pair-integrity validation.
• Registers the loader and enums for discovery via pyrit.datasets.seed_datasets.remote.
• Adds focused unit tests plus documentation/bibliography updates to surface the dataset in the loading guide and citation lists.

Reviewed changes

Copilot reviewed 7 out of 7 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
tests/unit/datasets/test_agentic_prompt_injection_boundary_dataset.py	Adds unit tests covering split loading, label modes, filters, and validation/error cases via mocked HF fetches.
pyrit/datasets/seed_datasets/remote/agentic_prompt_injection_boundary_dataset.py	Implements the new remote dataset loader, enums, validation, filtering, and SeedPrompt mapping with pinned HF revision metadata.
pyrit/datasets/seed_datasets/remote/init.py	Exports the new loader + enums so they’re discoverable/importable from the remote datasets package.
doc/references.bib	Adds the BibTeX citation entry for the dataset.
doc/code/datasets/1_loading_datasets.py	Documents the new loader in the dataset loading guide (jupytext source).
doc/code/datasets/1_loading_datasets.ipynb	Syncs the executed notebook with the new loader section and updated dataset-name listing output.
doc/bibliography.md	Adds the new citation key to the hidden citation-key dropdown list.

[Copilot]

Pull request overview

Copilot reviewed 7 out of 7 changed files in this pull request and generated no new comments.