<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Wanner Labs Blog</title><description>Notes on AI security: prompt injection, agent permission blast radius, tenant isolation, and what to actually look for in a review.</description><link>https://wannerlabs.com</link><language>en-us</language><item><title>Uber and MIT’s ADR: Defending AI Agents at the Speed of Risk</title><link>https://wannerlabs.com/blog/adr-uber-mit-speed-of-risk</link><guid isPermaLink="true">https://wannerlabs.com/blog/adr-uber-mit-speed-of-risk</guid><description>What ADR is, why Uber built it with MIT, what ten months of production deployment found, and why the defender’s clock now runs at machine speed.</description><pubDate>Wed, 05 Aug 2026 05:00:00 GMT</pubDate><category>ai-security</category><category>agent-security</category><category>mcp</category></item><item><title>Prompt Injection Is a Code Review Problem, Not Just a Model Problem</title><link>https://wannerlabs.com/blog/prompt-injection-for-code-review</link><guid isPermaLink="true">https://wannerlabs.com/blog/prompt-injection-for-code-review</guid><description>Why prompt injection in LLM agents needs the same review discipline as SQL injection did twenty years ago, and where to actually look for it in a PR.</description><pubDate>Fri, 31 Jul 2026 00:00:00 GMT</pubDate><category>ai-security</category><category>prompt-injection</category><category>code-review</category></item></channel></rss>