The adversarial workflow executes multiple isolated generation chains in parallel, with each chain tasking the Red Team with writing an original, search-grounded article while incorporating the Blue Team's detection rubric directly into its system instructions to naturally embed the specified target link.

Once drafted, the content passes through a multi-stage filtering pipeline where the Blue Team evaluates the complete piece blind—without knowing the designated target URL—flagging any unnatural links while the system screens for broken citations and prohibited competitor domains before dispositioning them as folded or verified.