Development

Injection defenses and tests

• Signed but Unsafe: Injection Through Webhook Payloads
• Asserting a Tool Was Not Called: Negative Fixtures for Injections
• Fixtures That Reproduce a Real Injection Without Customer Data
• Sanitizing Model Inputs at the Gateway
• Two Channels for Instructions and Data in a Chat Template
• When a Retrieved Document Tells the Agent to Email Someone
• Where the Prompt Boundary Meets Your Gateway