Never let the model choose the tenant ID. How I secured a real LLM agent and MCP server in Go: server-side identity, OAuth, RLS, PII masking, rate limits.
Never Let the Model Pick the Tenant ID: Securing an LLM Agent in Go
Related
One Support Call, Four Bugs: A Postmortem on Our AI Website Builder
I discovered a page on our customer's site that, at first glance, appeared to be a CSS bug. A hero...
xAI's Grok Build Uploaded Your Whole Repo, and the Privacy Toggle Did Nothing
The model did exactly what it was told. The software around the model uploaded the whole repository...
The Only AI Tell That Doesn't Need a Detector
Paul Graham posted a test this week that has nothing to do with sentence structure. Slop gives itself...