Serious question: Has all the research on #AI #security yielded any notable results, yet? I mean something beyond obvious stuff like: * put your #agents into a sandbox * run them with limited permissions (principle of least privilege) * if they process untrusted data, try to harden their #prompt so they won't follow instructions from #promptinjection * connect to your #MCP servers over TLS