Add security side quest: Jailbreaking the Agent Brief

[Copilot]

Adds a new optional security side quest covering jailbreak attacks — where adversarial instructions embedded in repository content (issue bodies, PR descriptions, file text) attempt to wholesale override the agent's task brief rather than inject a single command.

New file: workshop/side-quest-10-02-jailbreak-brief.md

• Distinguishes jailbreak from prompt injection: the goal is replacing the authoritative task brief, not slipping in a single directive
• Shows two realistic attack patterns: aggressive [SYSTEM OVERRIDE] format and softer "Note for the AI agent" framing
• Covers all four gh-aw defensive layers with hands-on exercises for each:
  • Compiled task brief — brief is loaded before any tool call results arrive; injected text in data competes with an already-established baseline
  • Minimal permissions: — caps what the token can authorize even after a partial jailbreak
  • safe-outputs — removes execution paths for undeclared write operations entirely (not just makes them harder to reach)
  • network.allowed-domains — blocks exfiltration to unlisted endpoints at the network layer

Modified: workshop/10-choose-your-scenario.md

Single-line [!TIP] callout added above 📚 See Also, linking to the new side quest.

Modified: workshop/README.md

New entry added to Optional Side Quests list, sequenced after side-quest-10-01-agent-brief.

[pelikhan]

@copilot add mention of the detection job and agentic threat detection

[Copilot]

@copilot add mention of the detection job and agentic threat detection

Added in 46a35d6. The side quest now covers the detection job as a fifth defense layer — explaining that every compiled gh-aw workflow runs an agentic threat detection job in its own isolated sandbox after the main agent finishes, and that the safe-outputs job only executes if needs.detection.result == 'success'. The section includes a YAML snippet showing the dependency, a hands-on exercise to find the detection job in the Actions log, and a new checkpoint item.