Flux
Couleur d'accent
Toutes les sources

Freek Van der Herten

139 articles Flux RSS
Programmation Web
Prompt-Injection Guardrails in Laravel: Defend the Tools, Not the Prompt

Prompt-Injection Guardrails in Laravel: Defend the Tools, Not the Prompt

You can't out-prompt an attacker — to the model, your system instructions and a malicious support ticket are the same text. So stop defending the prompt and lock down the boundaries you actually control: tools scoped to the authenticated user server-side, middleware that screens and logs, output handled as untrusted input, a human in front of anything irreversible, and a fake-free test that fails CI the moment someone drops the auth scope. Read more

Freek Van der Herten
Evals in Laravel: How to Prove Your AI Output Is Actually Good

Evals in Laravel: How to Prove Your AI Output Is Actually Good

Your Agent::fake() tests prove your Laravel AI feature runs — not that its output is any good. This evals a real ticket classifier with the AI SDK: a golden dataset for the fields you can check, an LLM-as-judge for the free text you can't, and a regression gate that catches a bad prompt before your customers do. Read more

Freek Van der Herten
Esc