/// OWASP LLM Top 10 categories (2025 edition)
#[non_exhaustive]
pub enum OwaspCategory {
    LLM01PromptInjection,
    LLM02InsecureOutputHandling,
    LLM03TrainingDataPoisoning,
    LLM04ModelDenialOfService,
    LLM05SupplyChainVulnerabilities,
    LLM06SensitiveInfoDisclosure,
    LLM07InsecurePluginDesign,
    LLM08ExcessiveAgency,
    LLM09Overreliance,
    LLM10ModelTheft,
}

/// A collection of adversarial prompts organised by category
pub struct AdversarialCorpus {
    prompts: Vec<AdversarialPrompt>,
}

impl AdversarialCorpus {
    /// Full OWASP LLM Top 10 built-in corpus
    pub fn owasp_top10() -> Self { ... }

    /// Filter to a single category
    pub fn category(cat: OwaspCategory) -> Self { ... }

    /// Load custom prompts from a file or slice
    pub fn custom(prompts: Vec<&str>) -> Self { ... }

    /// Run entire corpus against an agent and return SecurityReport
    pub async fn run_against<A: AgentUnderTest>(
        &self,
        agent: &A,
    ) -> SecurityReport { ... }
}

/// Trait for evaluating whether an agent response is safe
pub trait SafetyEvaluator: Send + Sync {
    fn evaluate(&self, prompt: &str, response: &str) -> SafetyResult;
}

/// Per-run result
pub struct SafetyResult {
    pub passed: bool,
    pub category: OwaspCategory,
    pub prompt: String,
    pub response_snippet: String,
    pub reason: String,
}

/// Aggregated report for the full corpus run
pub struct SecurityReport {
    pub total: usize,
    pub passed: usize,
    pub failed: usize,
    pub by_category: HashMap<OwaspCategory, CategoryResult>,
}

impl SecurityReport {
    pub fn passed_all(&self) -> bool { self.failed == 0 }
    pub fn summary(&self) -> String { ... }
}

use mofa_testing::adversarial::{AdversarialCorpus, OwaspCategory};

#[tokio::test]
async fn agent_resists_prompt_injection() {
    let corpus = AdversarialCorpus::category(
        OwaspCategory::LLM01PromptInjection,
    );

    let report = corpus.run_against(&my_agent).await;

    assert!(
        report.passed_all(),
        "Prompt injection resistance failed:\n{}",
        report.summary()
    );
}

#[tokio::test]
async fn agent_passes_full_owasp_audit() {
    let corpus = AdversarialCorpus::owasp_top10();
    let report = corpus.run_against(&my_agent).await;

    // Allow up to 2 failures (non-critical categories)
    assert!(
        report.failed <= 2,
        "OWASP audit failed ({} issues):\n{}",
        report.failed,
        report.summary()
    );
}