March 02, 2026

Threat modeling agentic workflows

A practical checklist: prompt injection, tool abuse, memory poisoning, and policy bypass.

Example sequence (Mermaid):

sequenceDiagram
  participant U as User
  participant A as Agent
  participant P as Policy Engine
  participant T as Tool
  U->>A: Goal
  A->>P: Request action(tool, scope)
  P-->>A: Allow/Deny + constraints
  A->>T: Execute within constraints
  T-->>A: Result
  A-->>U: Response + audit summary