AI SECURITY • 336 / 397
Understand how untrusted text, tools and autonomy create new attack paths.
Denylist
A denylist explicitly blocks known disallowed items but permits other items by default.
Think of it like
Think of Denylist as an input-trust or privilege problem: words can influence software decisions, so boundaries must be explicit.
Real life
Email, documents and web pages can become hostile inputs to AI systems through attacks involving Denylist.
SRE lens
Useful as a secondary control, but usually weaker than an allowlist for sensitive tools.
Remember thisA denylist explicitly blocks known disallowed items but permits other items by default.