What Praxen Found on FinBot and Where SAILORS FitsI built SAILORS, a ship-gate security checklist for AI capabilities. It asks seven questions before a feature ships: are inputs sanitized, are access controls in place at retrieval, are outputs inspec1Jul 30 · 8 min readprompt-to-patch-vinaya.hashnode.dev
SAILORS: A Threat Model for the AI Feature You're Shipping Next SprintA team ships a chatbot. Then a RAG-backed search. Then a tool that can act on a user's behalf, like issue a refund, send an email, or even update a record. Each one gets a security review, in theory. Jul 10 · 8 min readprompt-to-patch-vinaya.hashnode.dev
OWASP Top 10 for LLMs: what every security practitioner needs to knowI have audited web apps, APIs, and cloud infrastructure. When I started looking at LLMs seriously, I kept reaching for instincts that were wrong — not useless, but wrong in specific ways. This post isJun 18 · 11 min readprompt-to-patch-vinaya.hashnode.dev