"Your system prompt is not access control. Keep user IDs in state"
This story is from 2026-10-14. It is preserved in the archive; the latest stories are on the live feed.
The JWT was valid. The model still picked whose orders to fetch. The usual guard is one line in the system prompt: "Only show this customer's orders." Then a user asks for customer 4822's orders, the model passes 4822 to the tool, and the tool runs. A prompt is a request, not a permission check. Th…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-10-14 09:10 · DEV Community — AI
"Your system prompt is not access control. Keep user IDs in state"