The credentials that outlive the engagement
Vendor accounts, service principals, API keys and cloud tenancy persist after the final invoice. Revocation is not one action, and absence from an inventory is not absence.
5 min read
Security
Guardrails are an architecture, not a filter
Controls belong at the boundary that can enforce them. Authorisation happens in the downstream system, not in the model, and autonomy level sets how much each layer must carry.
5 min read
Prompt injection is a tool-permission problem
The injection is not the vulnerability; the tool the injected instruction can reach is. Retrieval and fine-tuning do not mitigate it, and prototypes grant permissions generously.
6 min read