Writing
security
-
From AI security tests to a description of the system
How Injectionator’s n8r-surface work records the components, connections and evidence behind an AI experiment—and why that matters for Surfaces.
-
How the fk did we end up here?
My journey from researching prompt injections to Injectionator, Surfaces, and the question of who owns the security of the whole AI system.
-
The AI Surface Convergence Continuum
What converged infrastructure taught me about AI surfaces: choose the composition, constrain the configuration, and prove which controls actually run.
-
A Chatbot Is Not the Surface: Testing the Path From Prompt to Consequence
Testing an AI feature means following the path from a prompt through its tools, data and consequences—not just testing the chat box.
-
Before and after AI Application Security testing: one HR chatbot
A bounded synthetic example of why model output, application enforcement, and downstream effect must be tested separately.
-
When Your Demo Lies to You
I shipped the ICP-1 CTO demo this week. Then I read my own logs and caught it lying. Here's what I did, and the team rule that came out of it.
-
Your LLM Security Moat (Or Someone Else's)
The original Injectionator Labs launch account. Labs is now offline; the current AI Surface Researcher guide is linked inside.