Agents
When software acts, the question is who may act and what stops it.
- Prompt injection: a CISO playbookInjection is the method. The tool budget is the cause. Six controls you can show, and a test that measures tool calls — not manners.
- Who is liable when an AI agent acts?An agent has no legal personality. Provider, deployer, product liability, and ordinary agency decide who pays — and a jailbreak does not change that.