Your AI Isn’t the Problem. Your Infrastructure Is. — Jiachen Jiang, Coder

Jiachen Jiang uses three agent security incidents, the Replit production database deletion, a relayed banking compromise involving Copilot, and the Nx supply chain attack, to argue that prompts cannot enforce boundaries. He maps each incident to six infrastructure controls: environmental separation, short-lived scoped credentials, identity-aligned access, model proxies, sandboxing, and independent audit logs.