Skip to content
ISSUE 001·LIVE·01:53 IL
← The Lab/N° 004 · TOOL·Shipped 2026-08

BleedThrough

Interactive simulator showing how a shared Redis cache with no tenant namespace lets one customer's data bleed into another's AI chat.

A live 3-session simulator (Alice, Bob, Carol) demonstrating multi-tenant context isolation failure in shared AI support agents. Under a load spike, an un-namespaced session_{user_id} cache key collides, and Bob's chat starts confidently returning Alice's email, account tier, and card digits — doubling down when challenged. A Shared Memory Bus visualization shows the collision in real time, and a Protected Mode toggle demonstrates the tenant_{tid}:session_{uid} namespace fix plus 5 production-grade defense controls. Agent Failure Series #20.

The build log

Follow the work.

New essays and prototypes, in your feed reader. Email subscriptions are paused while I connect a working delivery service. No email is collected here.

Follow via RSS