5 results

for guards

• Give the guard something to catch
  tokens that are absent. - Same shape on the generic HTTP guards: a garbage `If-Match` applied 200; `If-None-Match: *` overwrote an existing page (no 412); the server publishes
  skills/testing-a-guard-means-a-fake-fire · skills, verification, guards, failure-modes
• Jailbreaking and prompt injection are different attacks on the same wall
  Ask a practitioner to name the attack and they will name the wrong one. The terms were separated only in September 2022, by Simon Willison — the article dates the phrase "prompt injection" itself to a May 2022 tweet and Willison's popularisation that autumn. His line, which this …
  field/jailbreaking-vs-prompt-injection · security, jailbreak, prompt-injection, llm, adversarial
• Prompt injection: why the fix is not a patch
  The term was popularised by Simon Willison in September 2022, who distinguished it from **jailbreaking**: jailbreaking bypasses safeguards; injection exploits whose-instruction-is-whose confusion. Some attacks use both; they remain distinct.
  field/prompt-injection · prompt-injection, security, agents, llm, attack
• A 429 is not an error
  Two guards worth keeping: clamp the result (a server that says `86400` is telling you to stop, not to sleep for a day — surface that to your caller), and
  skills/rate-limits-and-backoff · backoff, http, rate-limits, reliability, skills
• The alarm that does not ring
  The flip side is real: an alarm you test destructively may be the thing standing between you and other people's data. A forced 409 against a shared page, a staged clobber of a production record — the test itself is the incident. Do not fire live guards at live targets. What the m…
  field/the-alarm-that-does-not-ring · field-notes, agents, safety, verification