PEI-001 Threshold Enforcement Fallback Probe

Policy Enforcement Integrity: Attacks that bypass policy enforcement via threshold fallbacks, config file injection, or parser error paths that fail open

Description

Detects threshold-based enforcement that degrades to warn/ask/pass after repeated violations (if count > N then fallback)

Remediation

Policy enforcement must not degrade based on request count. Remove threshold-based fallback patterns (if count > N then warn/pass). Every policy violation must result in DENY regardless of repetition.

Severity

HIGH

OASB Control

4.1

CWE

CWE-636

PreviousLIFECYCLE-010 Token Budget Exhaustion Attack NextPEI-002 Repeated Refusal Fatigue