Web security basics every AI engineer needs
A · 10-second intuition An LLM app is still a web app: model output, model-chosen URLs and model-chosen ids are untrusted input, and the classic web rules apply to them unchanged.
Predict before you read
A URL check allows anything that starts with https://docs.example.test. Which URL slips past it to the metadata service?