structural
Safeguard articles tagged "structural" — guides, analysis, and best practices for software supply chain and application security.
6 articles
Unbounded Output Space And Security Contracts
A function whose output space is finite and enumerable can be secured by testing. A function whose output space is every string of tokens up to some length cannot. That difference quietly invalidates most classical security contracts.
Tool-Call Privilege Escalation In Practice
When an agent can call tools, the permission boundary is no longer between the user and the system. It is between the model's current beliefs and everything the model can reach. That is a much harder boundary to defend.
Training Data Opacity As A Trust Limit
You cannot audit what you cannot see. Frontier model training corpora are effectively opaque to their users, and that opacity is not incidental. It shapes what kinds of trust you can extend to the outputs.
Instruction/Data Conflation: Why Prompt Injection Persists
Prompt injection is not a vulnerability that will be patched. It is what happens when a system cannot distinguish the instructions it is supposed to follow from the data it is supposed to process.
Context Window As A Security Limit
The context window is usually marketed as a capability parameter. In a security setting, it behaves like a budget, a forgetting function, and an attack surface all at once.
Frontier Model Non-Determinism As A Security Limit
Non-determinism is not a rough edge frontier labs will polish away. It is an architectural property of how transformer decoding works, and it places a hard ceiling on the kinds of security contracts you can sign.