- Security
Prompt injection: direct, indirect, and how to contain both
Why the attack cannot be patched at the model layer, what an indirect payload looks like, and where the controls have to sit.
October 4, 2026 · 5 min read
Practical reading on building, governing and running AI agents, from prompt injection to audit trails.
Why the attack cannot be patched at the model layer, what an indirect payload looks like, and where the controls have to sit.
October 4, 2026 · 5 min read
Regular expressions catch the personal data that looks like personal data. A second, contextual pass finds the kind hidden in ordinary language.
October 4, 2026 · 4 min read
A practical walkthrough of no-egress deployment: mirrored registries, in-cluster model serving, a private retrieval stack, and the hardening that makes it defensible.
October 4, 2026 · 4 min read
The engineering questions that decide whether a clinical AI project clears privacy review, and how each one becomes a configuration you can point at.
October 4, 2026 · 4 min read
The hardest audit question is what the system was configured to do on a given day. The properties that make that answerable.
October 4, 2026 · 4 min read
Relevance bands, freshness decay, document limits and snippet sizing: the upstream decisions that set answer accuracy before the model writes anything.
October 4, 2026 · 4 min read