Who Governs the Governor? — Stored Prompt Injection Through the API Gateway
Notes from thirteen years of API gateways, on the day an AI agent writes to your database. Written October 2026. Last updated October 2026. If you’re reading this years from now, after the incident review and the cleanup invoice: this is a record that the problem was visible. I should say where I’m coming from. I’ve spent thirteen years around API gateways. I have not built AI agents and I’m not an AI expert. What I can speak to is how data moves through APIs, and what happens when we trust it because of where it’s standing. Everything below is that, plus an honest list of what I don’t know. ...