AI_Security – AI Training BO Seer

Context Windows, Tokens & Limits

Bo / April 7, 2026

Context Windows, Tokens & Limits Context Window The context window is the maximum amount of information an AI model can process at once. What It Includes system prompt conversation history tool outputs tool definitions Why It’s Critical context accumulates automatically it consumes token budget overflow reduces performance Context Trade-offs Smaller Context more selective requires careful prompting Larger Context more flexibility but more complexity and noise Token Behaviour more context ≠ always better more tokens = higher cost diminishing returns after a point

Context Engineering

What Is Context Engineering?

Bo / April 7, 2026

Context Engineering Context Engineering is about selecting and managing the right information for the AI system to produce its best performance. It is the extension of prompt engineering. Prompt vs Context Prompt narrow static Context broader approach what to include where to pass info how to keep context manageable Why Context Matters context shapes AI agent behaviour context determines output quality context enables better decisions What Context Includes system prompt conversation history tool definitions tool outputs Key Principle Context engineering is about: → managing all the information your agent processes within its limited space

AI Consultant: Training and Fundamentals, Prompt Engineering

Protected: Writing Better Prompts

Bo / April 5, 2026

There is no excerpt because this is a protected post.

AI Consultant: Training and Fundamentals, Security Considerations

Spoofing & Impersonation Risks

Bo / April 4, 2026

Spoofing & Impersonation Risks What Is Spoofing? When a user pretends to be someone else and the agent accepts it without verification. High Risk When: Users self-identify (name/email) No identity verification exists Sensitive data is provided based on claims Prevention: Implement authentication before access Use trusted identity systems Authentication Methods: Username & Password SSO (Single Sign-On) OAuth

AI Consultant: Training and Fundamentals, Security Considerations

Tool Misuse & Unauthorized Actions

Bo / April 4, 2026

What Is Tool Misuse? When users manipulate an AI agent to use tools (APIs) in unintended ways. Risks: • Unauthorised data access • Execution of unintended actions High Risk When: Tools have broad access Instructions lack restrictions No authorization checks exist Prevention: • Use strict and explicit instructions • Limit tool capabilities (narrow scope)

AI Consultant: Training and Fundamentals, Security Considerations

Understanding AI Agent Security Fundamentals

Bo / April 4, 2026

Understanding AI Agent Security Fundamentals Introduction AI agents are powerful—but with that power comes responsibility. Security must be intentionally designed, especially when agents process files, access tools, and interact with users. Two Main Vulnerability Categories • Knowledge File Vulnerabilities • Agent Interaction Vulnerabilities