https://t0ul.com/tags/transfer/Recent content in Transfer on t0ulHugoen-usTue, 26 May 2026 00:00:00 +0000https://t0ul.com/blog/add-on-an-app-that-is-not-this-one/Tue, 26 May 2026 00:00:00 +0000https://t0ul.com/blog/add-on-an-app-that-is-not-this-one/<p><em>Part of my <a href="https://t0ul.com/blog/the-plan/">AI Security Engineering</a> series, a local email-to-calendar agent I build, then attack, then harden. If you have not set up the lab yet, start with <a href="https://t0ul.com/blog/setting-up-the-lab/">Set up your lab</a>. The lessons are <a href="https://github.com/t0ul/ai-security-engineering">on GitHub</a>, and the agent itself lives at <a href="https://github.com/t0ul/emaildrop">t0ul/emaildrop</a>.</em></p> <h2 id="the-claim-under-the-whole-book">The claim under the whole book</h2> <p>Thirty-odd lessons have attacked one agent. That is a good way to learn, and a bad way to end, because the thing worth taking away is not how emaildrop is secured, it is the method: build it, attack the real thing, resolve, re-attack live, keep every row wired. If that method only works on the app it was invented for, it is a story. If it drops onto an app it has never seen, it is a tool.</p>