There are between 1,810 and 27,250 prompts per hazard category, with a mean of 6,156. The number of prompts in the dataset, split by the hazard category and persona, is given in Table 4. There are substantially more prompts associated with the malicious user persona for Hate (n=26,530) and for Violent crimes (n=4,390) because we use templates for key terms (i.e. protected groups, terrorist groups and terrorist actors). Otherwise, minor differences in the number of prompts are due to different numbers of subcategories and sub-subcategories. The number of prompts assigned to each of the 13 interaction types, with breakdowns for each hazard category and persona, is shown in the Appendix (see Appendix G). A brief datasheet [1] is given in the Appendix (see Appendix H). It will be expanded for the v1.0 benchmark and dataset release.