Semantic Attacks: Exploiting What Agents See
The Era of Reality Injection.
Niki A. Niyikiza published on
12 min,
2371 words
In Map/Territory, I covered the agent→tool boundary: what happens when an agent’s string gets interpreted by a system. Path traversal, SSRF, command injection. The execution layer.
This post covers the opposite direction: world→agent.
World → [perception] → Agent → [authorization] → Tool → System
^ ^
This post Map/Territory