Promptective journal

At the AI boundary

Articles, practical guides and product news for teams governing AI across browsers, desktops and agents.

A mechanical agent arm crosses a cobalt workspace boundary towards a sensitive local-file card

Featured article1 September 20265 min read

SiYuan fixes prompt-injection path to SSH keys and cloud credentials

CVE-2026-82233 shows how an AI agent’s ordinary upload tool can turn hidden instructions and an approved tool call into sensitive local-file exposure.

CVE-2026-82233 let SiYuan’s AI agent copy sensitive local files through MCP, showing why tool approvals need action-level policy.

ChatGPT and Microsoft Copilot source devices connect to a Promptective P// policy boundary

Featured guide26 August 202610 min read

Stop sensitive data leaking into workplace AI

A practical workplace guide to prevent sensitive data reaching ChatGPT, Microsoft Copilot and GitHub Copilot using policy, DLP and tested controls.

An Amp thread passing through a Promptective policy aperture and continuing along three protected paths

News29 August 20268 min read

The Hook Between Intent and Action

Promptective now supports Amp.

Stories and analysis

A malicious repository directs an AI agent to read a sensitive file and make an outbound request

Article29 August 20265 min read

A malicious repository could turn Amazon Kiro into a data-exfiltration path

A Kiro prompt-injection flaw shows how repository content can steer an AI coding agent towards sensitive files, configuration changes and data exfiltration.

Cream court documents rest on a navy case file while a concealed ribbon becomes visible at a cobalt inspection aperture

Article24 August 20264 min read

A court filing tried to talk to AI. Your document pipeline might listen

A failed hidden-message attempt in a Connecticut court shows what prompt injection protection must cover across enterprise document workflows.

A human hand places a cobalt review tile among routed case records and an automated decision unit

Article21 August 20265 min read

Australia’s APP 1 automated decision deadline: a practical AI governance guide

What the 10 December 2026 APP 1 changes mean, which organisations are covered, how to map AI-supported decisions, and where Shadow AI discovery fits.

Practical reference

Guide library

Three materially distinct AI DLP control cartridges are compared against one braided data connector in a precision tray

Guide26 August 202615 min read

Choosing AI DLP that fits the path

Compare Promptective, Nightfall, Purview, Netskope, Prompt Security and Prisma AIRS for sensitive data in AI chat and agent workflows.

Read guide

A compact production model server stands inside nested cobalt, smoked-glass and aluminium control trays

Guide21 August 20265 min read

LLM security in production

A practical guide to LLM security in production: control prompts, retrieval, outputs and tools; minimise sensitive evidence; test and respond.

Read guide

Paper, translucent data, woven tool cable and a metal output capsule cross a smoked-glass partition through one cobalt checkpoint

Guide18 July 20264 min read

Designing the AI security boundary

A practical framework for securing LLM applications at the boundary between trusted instructions, untrusted content, model output, and real-world actions.

Read guide

Cream and dark instruction strips take different routes through a slatted model enclosure, with a cobalt clamp closing the side gap

Guide9 February 20263 min read

How LLM jailbreaks bend the rules

How attackers bypass LLM safety guardrails, the common techniques they use, and practical ways to defend AI applications.

Read guide

A graphite agent gripper holds a brass tool above a cobalt approval boundary beside an already permitted low-risk tool

Guide2 February 20264 min read

Securing AI agents with tools

Learn how to reduce prompt injection, tool abuse, and MCP risks with practical controls for LLM agents and their connected systems.

Read guide

Fifteen prompt specimens in varied paper, film and card textures are arranged under a brass inspection lens in a green tray

Guide25 January 202612 min read

15 prompt injection examples

Review 15 illustrative prompt injection attack examples across direct, indirect and agent risks, with source-backed controls for reducing their impact.

Read guide

A compact LLM application core sits inside sandstone, oxide and smoked-amber protective layers with separate controlled inputs

Guide20 January 20262 min read

Protecting LLM applications

A practical guide to securing your AI applications against prompt injection, jailbreaks, and data exfiltration. Learn defence-in-depth strategies.

Read guide

A cream trusted instruction and a dark untrusted ribbon cross before entering one model chamber through a cobalt aperture

Guide15 January 20262 min read

What is prompt injection?

Learn how prompt injection attacks work, see practical examples, and compare controls for protecting LLM applications in this 2026 guide.

Read guide

At the AI boundary

SiYuan fixes prompt-injection path to SSH keys and cloud credentials

Stop sensitive data leaking into workplace AI

The Hook Between Intent and Action

More Articles

A malicious repository could turn Amazon Kiro into a data-exfiltration path

A court filing tried to talk to AI. Your document pipeline might listen

Australia’s APP 1 automated decision deadline: a practical AI governance guide

Guide library

Choosing AI DLP that fits the path

LLM security in production

Designing the AI security boundary

How LLM jailbreaks bend the rules

Securing AI agents with tools

15 prompt injection examples

Protecting LLM applications

What is prompt injection?