OWASP FinBot CTF with Tenuo Defended Mode

About

A fork of the OWASP FinBot CTF that adds an optional defended mode using Tenuo, where each agent task gets a signed warrant listing the tools and argument values it may use. Tool calls are checked against the warrant before running, so prompt-injected instructions cannot trigger unauthorized actions such as paying an over-limit invoice. In the authors' red-team runs with Promptfoo, attacks that succeeded 50 times against the unprotected app succeeded 0 times with Tenuo enabled.