06 Oct 2026 · 9 min read
Access Control
Multi Tenant RAG: Enforce Access Control Before Retrieval
A reference architecture for tenant isolation, document ACLs, permission revocation, and authorization tests in RAG systems.
Read moreIDEAS, DECISIONS & LESSONS
Journal
Notes on AI, architecture and building useful products.
3 articles
21 Aug 2026 · 5 min read
ai-security
OpenAI's Private Safety Processing: Abuse Detection Without Reading Your Data
OpenAI's new Private Safety Processing architecture claims to catch cross-session attacks like Best-of-N jailbreaking under Zero Data Retention. A look at the actual engineering problem it's solving and whether the design holds up.
Read more
16 Mar 2026 · 9 min read
ai-agent
AI Agent Security in 2026: Protecting Client Projects When Using Claude Code, OpenClaw & Agentic AI
Deep dive into AI agent security threats in 2026. Covers prompt injection, data exfiltration, OpenClaw vulnerabilities, Claude Code hardening, and a complete defense architecture for teams deploying AI agents in client projects.
Read more