<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
  <title>Singular State</title>
  <link>https:&#x2F;&#x2F;singular-state.com</link>
  <description>Advanced technical expertise for feasibility, prototyping and modernization. We build the working pilot and ramp up your team to take it forward.</description>
  <language>en-US</language>
  <atom:link href="https://singular-state.com/topics/security/rss.xml" rel="self" type="application/rss+xml"/>
  <item>
    <title>The credentials that outlive the engagement</title>
    <link>https:&#x2F;&#x2F;singular-state.com&#x2F;articles&#x2F;credentials-that-outlive-the-engagement&#x2F;</link>
    <guid isPermaLink="true">https:&#x2F;&#x2F;singular-state.com&#x2F;articles&#x2F;credentials-that-outlive-the-engagement&#x2F;</guid>
    <pubDate>Mon, 07 Sep 2026 00:00:00 +0000</pubDate>
    <description>Vendor accounts, service principals, API keys and cloud tenancy persist after the final invoice. Revocation is not one action, and absence from an inventory is not absence.</description>
  </item>
  <item>
    <title>Guardrails are an architecture, not a filter</title>
    <link>https:&#x2F;&#x2F;singular-state.com&#x2F;articles&#x2F;guardrails-are-an-architecture&#x2F;</link>
    <guid isPermaLink="true">https:&#x2F;&#x2F;singular-state.com&#x2F;articles&#x2F;guardrails-are-an-architecture&#x2F;</guid>
    <pubDate>Mon, 07 Sep 2026 00:00:00 +0000</pubDate>
    <description>Controls belong at the boundary that can enforce them. Authorisation happens in the downstream system, not in the model, and autonomy level sets how much each layer must carry.</description>
  </item>
  <item>
    <title>Prompt injection is a tool-permission problem</title>
    <link>https:&#x2F;&#x2F;singular-state.com&#x2F;articles&#x2F;prompt-injection-is-tool-permissions&#x2F;</link>
    <guid isPermaLink="true">https:&#x2F;&#x2F;singular-state.com&#x2F;articles&#x2F;prompt-injection-is-tool-permissions&#x2F;</guid>
    <pubDate>Mon, 07 Sep 2026 00:00:00 +0000</pubDate>
    <description>The injection is not the vulnerability; the tool the injected instruction can reach is. Retrieval and fine-tuning do not mitigate it, and prototypes grant permissions generously.</description>
  </item>
</channel>
</rss>
