Notes on security, AI and privacy. Occasional — only when there is something worth saying.
12 September 2026 — persistent memory turns a one-turn prompt injection into a foothold that survives a restart.