<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Applied AI Safety</title><link>https://appliedaisafety.com</link><description>Practical AI safety for the people building and shipping AI systems. Evaluations, permissions, prompt injection, and research put into practice.</description><language>en-US</language><item><title>A Retrieved Page Is Evidence, Not Permission</title><link>https://appliedaisafety.com/journal/retrieved-pages-are-not-permission/</link><guid>https://appliedaisafety.com/journal/retrieved-pages-are-not-permission/</guid><description>Trace an indirect prompt injection from source content to attempted action, then design boundaries that survive a mistaken model decision.</description><pubDate>Sat, 19 Sep 2026 00:00:00 GMT</pubDate></item><item><title>Agent Memory Needs Data Boundaries, Not Just Better Retrieval</title><link>https://appliedaisafety.com/journal/secure-agent-memory-data-boundaries/</link><guid>https://appliedaisafety.com/journal/secure-agent-memory-data-boundaries/</guid><description>Design scoped memory access, preserve provenance, and account for derived notes, caches, deletion, and cross-agent sharing.</description><pubDate>Sat, 19 Sep 2026 00:00:00 GMT</pubDate></item><item><title>An Incident Playbook for Tool-Using Agents</title><link>https://appliedaisafety.com/journal/incident-response-tool-using-agents/</link><guid>https://appliedaisafety.com/journal/incident-response-tool-using-agents/</guid><description>Contain risky actions, preserve useful evidence, reconcile uncertain effects, and restore service without replaying the incident.</description><pubDate>Sat, 19 Sep 2026 00:00:00 GMT</pubDate></item><item><title>Design Evaluations That Can Support a Safety Claim</title><link>https://appliedaisafety.com/journal/design-evaluations-read-safety-claims/</link><guid>https://appliedaisafety.com/journal/design-evaluations-read-safety-claims/</guid><description>Choose observable outcomes, separate task success from harm, and read evaluation results without turning a narrow benchmark into a universal promise.</description><pubDate>Sat, 19 Sep 2026 00:00:00 GMT</pubDate></item><item><title>Evaluate the Permission Boundary Before the Model</title><link>https://appliedaisafety.com/journal/evaluate-the-permission-boundary/</link><guid>https://appliedaisafety.com/journal/evaluate-the-permission-boundary/</guid><description>Build a permission matrix, test the executor, and distinguish blocked attempts from unauthorized effects.</description><pubDate>Sat, 19 Sep 2026 00:00:00 GMT</pubDate></item><item><title>Make Human Approval a Decision, Not a Reflex</title><link>https://appliedaisafety.com/journal/human-review-approval-fatigue/</link><guid>https://appliedaisafety.com/journal/human-review-approval-fatigue/</guid><description>Design review around consequential actions, clear evidence, and approvals that cannot silently authorize a different operation.</description><pubDate>Sat, 19 Sep 2026 00:00:00 GMT</pubDate></item></channel></rss>