ASD puts prompt injection in the harness

Australia’s Signals Directorate says prompt injection has no fully reliable model-level fix, and its new guidance gives boards 7 questions for agent harnesses, according to iTnews. The guidance puts controls in surrounding software—least-privilege access, human approval for high-impact actions, output verification, and logs—rather than trusting model safety behavior. Builders should treat Kimi Desktop’s approval check as table stakes: permissions, tool boundaries, and recovery paths belong outside model behavior.