Tarık Şenkal Security
5 posts
Security9 minDefeating Prompt Injection by Design: CaMeL and Capability-Based Defence
Better prompts do not solve prompt injection. CaMeL, the dual-LLM pattern, capability-based policy and the lethal trifecta — defences enforced outside the model.
Security6 minAgent Sandboxing and Permissions: Avoiding the Lethal Trifecta
The lethal trifecta, the rule of two, a tool permission matrix, container isolation, egress filtering and an audit-log schema that doubles as a compliance trail.
Security6 minMCP Server Security: When the Tool Description Is the Attack
Tool poisoning, rug-pull redefinition, confused deputy and cross-server shadowing: the MCP-specific attack surface, plus a working tool-definition pinning check.
Security6 minOWASP Agentic Top 10: What ASI01–ASI10 Mean in Code
Turning each item of the OWASP Agentic Top 10 (2026) into an implementable control — a config, a policy and a test — instead of restating the risk.
Security8 minPrompt Injection and Jailbreaks: The Foundations of AI Security
What are prompt injection and jailbreaks, and how do they work? We explain the risks in RAG and agent systems, plus layered defenses, with plain everyday analogies.