Tagged:

4 posts

• AI Secrets Management: Protecting API Keys, System Prompts, and Model Credentials in Production

  API keys for model providers have a blast radius unlike traditional credentials. System prompts encode proprietary business logic that teams rarely treat as secrets. This is a practical guide to treating AI credentials as the first-class secrets they are — with concrete patterns for storage, rotation, agent scoping, and incident response.

  Jul 13, 2026 defense-patterns credential-management secrets-management least-privilege agent-security monitoring incident-response api-security system-prompt cicd

• System Prompt Extraction: How Attackers Steal Proprietary AI Instructions

  System prompts encode valuable business logic, persona, and safety overrides — and deployed AI products routinely leak them to motivated users. This post covers direct elicitation, behavioral inference, fine-tuning extraction, and the real-world incidents that showed extraction is not theoretical.

  Jul 5, 2026 prompt-injection llm-security system-prompt threat-modeling defense-patterns adversarial-ml

• We Found a Regression in Our Own AI Agent

  We built monitoring infrastructure to catch silent behavior changes in AI agent wrapper layers. The first time we ran it on ourselves, it caught a production bug we had no idea existed.

  May 27, 2026 agent-security context-window monitoring regression system-prompt

• The Hidden Cost of Instructions: 12,956 Tokens Before You Say a Word

  We measured how many tokens the Copilot CLI wrapper layer consumes before your first message. The answer — and what it means for context window budgeting — surprised us.

  May 14, 2026 context-window system-prompt tool-use agent-security measurement