Tagged:

2 posts

• Defending Against Prompt Injection: Privilege Separation, Structured Outputs, and the Limits of Current Defenses

  No single control stops prompt injection — but layering four concrete patterns (privilege separation, structured outputs, instruction hierarchy, spotlighting untrusted content) gives defenders a workable stack. This post synthesizes what actually works, and is honest about what remains unsolved.

  Jul 9, 2026 prompt-injection defense-in-depth privilege-separation structured-outputs instruction-hierarchy llm-security agent-security architecture

• Defense-in-Depth for AI Agents — A Security Architect's Stack

  Securing an AI agent isn't one control — it's a stack. A structured guide to layering security controls across the full agent architecture, from model selection through orchestration, tool execution, and output validation.

  Jun 26, 2026 agent-security defense-in-depth threat-modeling architecture least-privilege prompt-injection