Testing Provenance-Based Controls Against Indirect Prompt Injection in AI Agents
Most defenses against prompt injection are built around one question: does this text look malicious? I spent a weekend betting that’s the wrong question — and built a small tool that never reads the attacker’s words at all. It caught attacks the “smart” detectors missed. It also, with total confidence, blocked every single legitimate action … Read more