Architecture
- The Reader/Writer Split: Hardening AI Agent Pipelines Against Prompt Injection
A prompt injection attempt hit our AI blog pipeline today. We refactored every combined cron into a reader/writer split -- separating the session that touches the web from the session that takes real-world actions.