Crescendo Attack Fuzzer

Crescendo Attack Fuzzer (primary). Build a stateful multi-turn harness that stores conversation state, attack stages, model/provider/prompt versions, tool-call outcomes, and expected security properties. Include direct and indirect injection, gradual escalation, payload splitting/encoding, and attempts to access another user's data or invoke an unauthorized tool. Run only against your own application, local models, or explicitly authorized environments. Save reproducible transcripts and turn each confirmed failure into a regression case.