SAILORS: A Threat Model for the AI Feature You're Shipping Next Sprint

A team ships a chatbot. Then a RAG-backed search. Then a tool that can act on a user's behalf, like issue a refund, send an email, or even update a record. Each one gets a security review, in theory.