Why Won't Models Alone Stop AI Injection Attacks?

Parag Agrawal says securing agents takes defense at every layer, and models alone will not solve it.

The web is a dangerous place. Anyone can post anything malicious anywhere, and a lot of that content will flow into an agent's context, so injection attacks are possible. Model builders have made very real strides in the last two years on not being very vulnerable. The whole world will rely on defense in many layers, and almost every layer has to obsess about the problem. The web layer has to focus on solving it before the problem reaches the models. Models then have to focus on it. App builders who build with models and with the web layer have to focus on it at their own layer. Dealing with adversaries at every layer is what gives true defense.