# Guardrails: the controls you build yourself

- URL: https://talkfuse.com/story/guardrails-the-controls-you-build-yourself/
- Published: 2026-11-10T14:42:40+00:00
- Updated: 2026-11-10T21:08:54+00:00
- Original publisher: Sheffield Digital
- Original article: https://sheffield.digital/guardrails-the-controls-you-build-yourself/
- Topics: AI, Sheffield, Technology

## Key points

- Provider safeguards do not secure a business’s own systems or customer data.
- Prompt injection can arrive through user input or documents an AI reads.
- Limit agents’ permissions so they cannot change production on their own.

## Summary

The article argues that businesses adding AI features need to build their own security controls, because safeguards supplied by AI providers do not protect a company’s data, systems or customers. Security consultant Kit Barker says prompt injection can lead an AI system to follow malicious instructions in a user message or in material it later reads, such as a web page, email or CV.

Barker says developers should assume an AI agent may eventually be manipulated and limit what it can access or do. In his coding pipeline, agents can write code and open pull requests, but hold no production deployment credentials, cannot change merge checks or approve their own work; GitHub branch rules enforce the controls independently of the agents’ instructions.

---
Summarised by TalkFuse (https://talkfuse.com/). Quote the original publisher for the reporting and link this page for the summary and discussion.