Attack surface

Where untrusted input can influence AI behavior.

Why it matters

Broader surface needs broader pack coverage.

Example

Public chat plus tool calls plus retrieved PDFs.