Taswar Bhatti
Practical guides on AI agents, LLM security, C#/.NET and Cloud, from Taswar Bhatti
ai-agent-security-prompt-injection-permission-boundaries

Last Saturday, 17 October 2026, I gave a talk at the DevNot Developer Summit in Istanbul called “From Prompt Injection to Permission Boundaries: Security for AI Agents.” This post is the written version, with a few extra notes I didn’t have time to say on stage.

Why agent security is different now

A chatbot that gives a bad answer is embarrassing. An agent that takes a bad action is an incident.

Agents don’t just generate text anymore. They call tools, hit APIs, write to databases, send emails and open pull requests. That changes the threat model completely. With tools attached, a prompt injection is no longer … Read the rest “From Prompt Injection to Permission Boundaries: Security for AI Agents”

UsingGrok4.7withCSharp

xAI just announced that Grok 4.7 so I wanted to try their model with C#. This isn’t another incremental update—it’s a model specifically architected for advanced reasoning, long-horizon problem solving, software engineering, and agentic workflows. For .NET developers building enterprise applications with AI capabilities, here’s what actually matters and how to put it to work.

What Grok 4.7 Actually Is

Grok 4.7 is xAI’s latest model release, built from the ground up for scenarios where you need an AI that can think through multi-step problems, use tools effectively, and maintain context across extended tasks. The key differentiators:

  • Deep reasoning capabilities. Trained extensively on complex problem-solving tasks requiring planning, analysis, and synthesis—not just pattern matching or next-token prediction.
  • Up to 500K tokens of context, according to the current Grok deployment guide. Input and output share that budget; actual use
… Read the rest “Using Grok 4.7 with C#”
ClaudeHaiku5.5forCSharpDevelopers

There are a lot of AI model announcements these days, but every now and then one lands that feels immediately practical. Claude Haiku 5.5 is one of those releases.

Anthropic’s marketing says it’s their "cheapest, fastest, and most capable small model ever." New model, now with extra adjectives. But the numbers behind the press release are actually interesting: 75% cheaper than Haiku 4.5, sub-second response times for most requests, and speed benchmarks showing over 30% latency reduction in customer eval suites.

The more important part is that this isn’t just incremental improvements on an already-fast model — it’s designed to make high-volume work actually economically … Read the rest “Claude Haiku 5.5 for C# Developers: The Speed-Cost Sweet Spot”

Microsoft-Decision-1-Csharp-Developer

Most of the calls inside a production .NET agent are not “write me a paragraph.” They are small, repeated judgments: which team owns this ticket, is this reply promising a refund, how severe is this incident, should the agent continue or hand off.

Those steps still get sent to a frontier chat model because that is the client everyone already wired up. It works. It is also slow, expensive, and a little awkward — you ask for JSON, then you parse prose that almost looks like JSON, then you invent a confidence score the model never actually returned.

Microsoft-Decision-1, now in public preview in the Foundry … Read the rest “Not Every Step Needs a Chat Model — Microsoft-Decision-1 for C# Developers”

GPT-6.1-Sol-CSharp-Developers

When I wrote about GPT-6 Astra, the interesting question was: Can an agent take a messy problem, investigate it, and hand back something worth reviewing? The examples were deliberately substantial: bug investigations, BI recommendations, template-based reports, approval-gated record updates, and long-document synthesis.

Now there is a different question: Can you afford to do that every time the work shows up? Microsoft’s GPT-6.1 Sol announcement says GPT-6.1 Sol is generally available in Microsoft Foundry. It upgrades GPT-6 Sol, not Astra, and improves agentic coding, computer use, and professional work. Microsoft says it approaches Astra on its cited evaluations while offering a better capability-to-cost balance for agents that run all day. That is a positioning and evaluation claim, not a promise that Sol wins every task or that any particular deployment will be cheaper.

For a .NET team, I … Read the rest “GPT-6.1 Sol for C# Developers – Production Agents in Foundry”

UA-4524639-2