Elena' s AI Blog

AI Safety Series

Elena Daehnhardt

 Midjourney AI-generated art
Image credit: Illustration created with Midjourney, prompt by the author.
Image prompt

“An illustration representing cloud computing”

AI Safety

Focused posts on defensive architecture, privacy, and risk management for real AI use.

Series Progress

4 of 5 posts published

All Posts in This Series

Part 2: OpenClaw Isn't a Chatbot Anymore. It's Infrastructure.

AI agents like OpenClaw are wonderful tools — but without strict access rules and proper supervision, they can turn an ordinary Tuesday into something you will be explaining to HR for weeks. In this post, we explore the very real risks of deploying AI assistants carelessly, from leaked credentials to messages you absolutely did not mean to send. Most importantly, we look at how to use OpenClaw the right way, because when deployed thoughtfully, it is one of the most exciting and capable tools we are only just beginning to understand.

 		OpenClaw Isn't a Chatbot Anymore. It's Infrastructure.

Part 3: Using AI Code Assistants Safely

A practical, human guide to using generative code assistants safely — without leaking secrets, breaking trust, or losing control of your work.

 		Using AI Code Assistants Safely

Part 4: The Digital Butler or Trojan Horse? A Privacy Playbook for Persistent AI Agents

Persistent AI agents can save hours each week, but they also turn hidden prompt injections into real-world actions unless you design strict controls. This guide shows how to harden agent workflows with policy gates, isolation, scoped permissions, and safe auditing.

 		The Digital Butler or Trojan Horse? A Privacy Playbook for Persistent AI Agents

Part 6: I Gave My AI Agent the Keys to My Inbox — Then Tried to Break Into It Myself

I built an AI email agent for holiday cover, then red-teamed it myself. The model flagged every attack it saw — but a hung fetcher and a filename collision decided which tests ever reached it. Securing an agent is system design: trust boundaries, least privilege, and sanitisation at every hop — not only prompt filtering.

 		I Gave My AI Agent the Keys to My Inbox — Then Tried to Break Into It Myself

Part 7: Round Two: What Happens When My Prompt-Injection Detector Fails?

Coming Soon

Round two of red-teaming my AI email agent: attacks that read like ordinary reader questions, a much larger false-positive corpus, and a deliberate test of what happens when the prompt-injection detector itself fails.

This post is currently being written and will be published soon.

 Round Two: What Happens When My Prompt-Injection Detector Fails?

Getting Started

New to this series? Start with Part 2: OpenClaw Isn’t a Chatbot Anymore. It’s Infrastructure..

Each post builds on the previous one, so reading them in order is recommended. Each post also works on its own if you need to jump to a specific topic.

All Posts
Copyright © Elena Daehnhardt
Privacy and Terms