Blog

Deep-dive guides on AI agents, agent orchestration, MCP, and developer tooling.

1 post found

Security

The Trust Boundary Problem: Why Tool-Calling Agents Need to Treat Tool Output as Untrusted Input

Most agent security advice targets prompt injection at the wrong layer. The real fix is architectural: separate untrusted tool output from privileged context, scope tool capabilities narrowly, and gate side-effecting actions behind confirmation.

July 2, 2026 · 8 min read

New posts by email

One email when a new post goes up. No other mail; unsubscribe in one click.

We store your email only to send new posts. See the privacy policy.