All 30 articles, sorted alphabetically
Federated Prompt Engineering
Cross-org sharing of prompt patterns. Emerging community norms.
Read article →LLM Data Exfiltration
How attackers extract data (system prompts, retrieved context, chat history) from LLMs through carefully-crafted queries.
Read article →LLM Deployment Hardening
Container security, network, secrets, monitoring. Standard cloud hardening + LLM.
Read article →LLM Hallucination Risk
How LLMs generate plausible but false information, why hallucinations happen, and how to mitigate in production systems.
Read article →LLM PII Leakage
How LLMs memorize training data, why they can leak PII in responses, and mitigation strategies including differential privacy.
Read article →Agent Tool Permissions: Least Privilege Between a Model and Real Actions
Why an LLM agent's security must live in a broker outside the model — per-tool allowlists, argument constraints, identity sco…
Read article →LLM audit logging architecture
Deep-dive on audit logging for LLM systems: capturing request context, assembled prompts, model I/O and tool effects; redaction to hashed placeholders…
Read article →LLM security canary tokens architecture
Deep-dive on canary tokens for LLM systems: why detection matters where prevention is incomplete, what makes a good canary (uniqueness, plausibility, …
Read article →Confused Deputy Attacks on Agents
Agent acts with its privileges on attacker behalf.
Read article →Data poisoning -- corrupting the model through its training data
Deep-dive on data poisoning: corrupting a model via malicious training data, poisoning types (backdoor/bias/degradation), backdoor triggers (hidden be…
Read article →LLM Defense in Depth: The Full Security Stack
A 2500-word walkthrough of a production LLM security architecture: perimeter, identity, rate, input, firewall, model, retrieval, tools, output, egress…
Read article →LLM egress filtering architecture
Deep-dive on egress filtering for LLM agents: the forced choke point, destination allowlists, content inspection for secrets and PII, canary tokens, m…
Read article →LLM Security Evals
How to systematically evaluate LLM security via benchmark suites.
Read article →Human-in-the-loop approval gates for AI agents
Deep-dive on human-in-the-loop approval gates for agent actions: a risk classifier that routes by risk and reversibility, an auto-execute path for saf…
Read article →LLM Jailbreak Defense Architecture in Depth
A 2500-word walkthrough of jailbreak defense architecture: input classifier, safety-tuned model, system prompt hardening, constrained decoding, output…
Read article →Membership Inference
How membership inference attacks determine if a specific data point was in the training set.
Read article →Model extraction
Deep-dive on model extraction attacks and defenses: systematic API querying, response collection, surrogate training, behavior-not-weights theft, dete…
Read article →LLM moderation architecture
Deep-dive on layered LLM moderation: heuristics + ML + policy engine + human review with a training loop that closes on hard examples.
Read article →LLM output handling -- treating model output as untrusted
Deep-dive on LLM output handling: the untrusted-output threat, output flowing into injection sinks (HTML/SQL/shell/code), context-aware encoding and e…
Read article →LLM PII Detection and Redaction Architecture in Depth
A 2500-word walkthrough of LLM PII architecture: detection layers, redactor, reversible tokens, output scanning, log redaction, audit, right to erasur…
Read article →LLM output provenance architecture
Deep-dive on LLM output provenance: source citations, watermark, audit records, verifier tool, provenance UI, policy, and metrics.
Read article →RAG Defense Architecture in Depth
A 2500-word walkthrough of RAG defense architecture: source allowlist, signing, sanitization, tenant-scoped retrieval, quarantine, citations, hallucin…
Read article →LLM Red Teaming
How red teaming (structured adversarial testing) discovers LLM vulnerabilities before attackers.
Read article →Agent tool-execution sandboxing architecture
Deep-dive on sandboxing LLM agent tool calls: policy engines, Firecracker/gVisor/WASM isolation tiers, warm slot pools, secrets brokering, egress prox…
Read article →Secrets management architecture for LLM applications
Deep-dive on LLM secrets security: why context windows and prompt logs leak credentials, vault-issued short-lived credentials, opaque secret reference…
Read article →Spotlighting
Spotlighting: mark untrusted content clearly.
Read article →System prompt leakage architecture
Deep-dive on LLM system prompt leakage: why the system role is not a privilege boundary, extraction via direct ask, roleplay, continuation, encoding, …
Read article →Multi-tenant LLM isolation architecture
Deep-dive on tenant isolation for LLM platforms: unforgeable tenant context, retrieval namespaces vs filters, cache-key design, per-tenant adapters, e…
Read article →Unicode smuggling defense architecture
Deep-dive on defending LLMs against Unicode smuggling: hidden Unicode Tag-block payloads, zero-width and bidirectional controls, homoglyph/confusable …
Read article →RAG Document Curation
Prevent poisoned documents entering KB. Curation + moderation patterns.
Read article →