https://t0ul.com/tags/models/Recent content in Models on t0ulHugoen-usTue, 03 Mar 2026 00:00:00 +0000https://t0ul.com/blog/model-artifacts/Tue, 03 Mar 2026 00:00:00 +0000https://t0ul.com/blog/model-artifacts/<p><em>Part of my <a href="https://t0ul.com/blog/the-plan/">AI Security Engineering</a> series, a local email-to-calendar agent I build, then attack, then harden. If you have not set up the lab yet, start with <a href="https://t0ul.com/blog/setting-up-the-lab/">Set up your lab</a>. The lessons are <a href="https://github.com/t0ul/ai-security-engineering">on GitHub</a>, and the agent itself lives at <a href="https://github.com/t0ul/emaildrop">t0ul/emaildrop</a>.</em></p> <h2 id="the-model-is-a-download-you-trust">The model is a download you trust</h2> <p>The last post pinned the tool catalog so the agent only calls tools it approved. But the model is itself a file the agent downloaded from somewhere and runs, and so are its weights and adapters. The same question applies, and it is sharper here, because of how model files load.</p>