AI Security

Transitive trust can defeat an apparently isolated evaluation environment.

When an AI system reads untrusted content and can act on tools, the security question becomes which text is allowed to become authority.

An agent becomes security-sensitive when it can combine untrusted information with credentials, tools and the authority to take action.