Playgroundno wallet · made on first pay
Poison catalog

Break it. Watch it refuse to break.

Three deliberate attacks against the public catalog — no session needed. Mint means the facilitator refused for the right reason (a pass for the defense); coral means something unexpected happened.

Catalog attacks

No session needed — both poll the facilitator's public /health and /discovery/resources.

Prompt injection via a crafted description

Not a live round-trip. This runs a faithful local port of the facilitator's real sanitizeDescription() (vellar-facilitator/src/catalog.ts) against whatever you type below — live, in this process, with no network call to the facilitator at all. Cataloging a new resource with a crafted description isn't triggerable from this playground without controlling an independent seller identity.