One search. Connected ideas.

Beginner — What is prompt injection?

AI and LLM fundamentals

Input validation checks permitted shapes and values; output validation checks generated data before use. Rate limiting constrains requests or resources by user, tenant, and operation. Secure tool services mediate database/API access through known business…

Tool poisoning uses malicious tool definitions or descriptions to influence model behavior. Excessive agency gives the AI more permissions or autonomy than its task needs. A harmless-looking tool name can conceal a sensitive operation or destination.

Prompt injection is an attempt to make a model follow an attacker's instructions instead of the intended task. Indirect injection places those instructions in external content, such as a PDF, webpage, email, or tool result. Jailbreaking generally attempts to…

Data leakage is unauthorized disclosure. PII means personally identifiable information, such as identity-linked names, contact details, and account identifiers. Sensitive business or health information and credentials need protection even when they do not fit…

Authentication verifies identity. Authorization decides allowed objects and actions. Least privilege grants only required capabilities; tenant isolation keeps one organization's data and operations separated from others.

Multi-tenancy supports several organizations while preventing cross-organization access. MongoDB often fits flexible document records; PostgreSQL provides relational constraints, joins, transactions, and optional row-level security with pgvector. Both require…

Secure action flow: LLM proposal → allowlisted tool → identity/authorization → schema + rules → limits → business service → minimal result.

Ingestion: approved source → secure parse/OCR → coherent chunks + metadata → embeddings → complete published index.

LangChain agent construction combines models, tools, and runtime behavior into an agent interface. Simple code uses direct SDK calls and ordinary functions instead. Both can produce production applications if their reliability and security requirements are…

Authentication establishes who a client/user is; authorization determines what that identity may do. MCP connection authorization and downstream business authorization are separate concerns. A valid connection does not automatically permit every customer's…

Input validation checks permitted shapes and values; output validation checks generated data before use. Rate limiting constrains requests or resources by user, tenant, and operation. Secure tool services mediate database/API access through known business…

AI and LLM fundamentals

Tool poisoning uses malicious tool definitions or descriptions to influence model behavior. Excessive agency gives the AI more permissions or autonomy than its task needs. A harmless-looking tool name can conceal a sensitive operation or destination.

Prompt injection is an attempt to make a model follow an attacker's instructions instead of the intended task. Indirect injection places those instructions in external content, such as a PDF, webpage, email, or tool result. Jailbreaking generally attempts to…

Data leakage is unauthorized disclosure. PII means personally identifiable information, such as identity-linked names, contact details, and account identifiers. Sensitive business or health information and credentials need protection even when they do not fit…

Authentication verifies identity. Authorization decides allowed objects and actions. Least privilege grants only required capabilities; tenant isolation keeps one organization's data and operations separated from others.

It is an attempt to redirect the model through attacker-controlled instructions. When those instructions appear in a PDF, webpage, email, or tool result, it is indirect injection. I treat these sources as data and limit model authority.

A generated query can read too much, mutate data, or consume excessive resources. I expose narrow schema-defined business tools with authorization, parameterized queries, field projection, and limits instead of broad database credentials.

Browser to API, documents to parser, model to tool executor, tool to business service, cross-tenant retrieval/memory/cache, and application to provider/telemetry. At each boundary I validate, minimize, authorize, and record permitted outcomes.

The invoice is untrusted content. The agent lacks unrestricted read/send tools, the tool service checks object access and recipients, and sending requires the configured approval. A better prompt helps but does not serve as the primary barrier.

Beginner — What is prompt injection?

Multi-tenancy supports several organizations while preventing cross-organization access. MongoDB often fits flexible document records; PostgreSQL provides relational constraints, joins, transactions, and optional row-level security with pgvector. Both require…

AI Engineering learning module

AI Engineering learning module

AI Engineering learning module

AI Engineering learning module

AI Engineering learning module

AI Engineering learning module

AI Engineering learning module