Articles
Notes from building real things
Web, React and Next.js, AI and RAG, and mobile. Written from production work, not tutorials about tutorials.
FeaturedAI Security
Defending Against the Lethal Trifecta: An Agent Architecture That Survives Prompt Injection
Prompt injection is OWASP's number one LLM risk and no input filter fixes it. The real defense is architectural: detect when an agent holds all three lethal trifecta conditions at once, then break one of them. Here is how I do it with capability scoping, egress allow-lists, and human approval on privileged calls.
· 9 min read
Building something similar?
I take on a few projects at a time: web apps, AI features, and mobile. Tell me what you are working on.
Start a conversation