AppliedAIPrep logoAppliedAI/Prep
Courses/Agent Engineering/Trusting nothing the agent reads14 min read

Deciding what the agent may do, not what it may say

Once you accept that an injection will eventually succeed, the only thing that bounds the damage is what the agent was permitted to do at that moment. Identity, scoping, and the actions that need a second signature.

a free account unlocks the core curriculum tier · no card