Guardrails Belong in the Network, Not the Prompt
Treating prompt injection as a prompting problem is an architectural dead end; the defensible control points are runtime/network-layer policy, least privilege, and egress validation, because injection success cannot be reliably reduced at the model layer.
AngleArgue from the layered-safety model in the keynote: model hardening is one layer, but the network-level guardrail is the one that converts a model bypass into a blocked exfiltration event instead of a breach.
Source video ↗The Two Clocks Are Not an Excuse: Agent ROI Is Gated by Process Redesign
The diffusion-lag argument is often used to defer accountability for AI ROI; instead it should force teams to treat organizational redesign as the primary engineering dependency and to measure it with the same rigor as capability.
AngleUse the steam and electrification analogies to reframe enterprise AI roadmaps as process-redesign programs, then propose proxies that make the slow clock visible in planning.
Source video ↗The Software Factory Ladder: Tooling Requirements Scale With Autonomy, Not Model Quality
Investments in orchestrators, sandboxes, and linter gatekeepers are only justified at later stages of the developer-AI maturity ladder, so teams should diagnose their actual stage before buying factory-grade infrastructure.
AngleWalk the staged progression from copy-paste slot machine to one-shot chat to multi-agent factories, and show which bottleneck each stage exposes and which tooling each stage actually requires.
Source video ↗Sovereign AI Is a Deployment Topology Constraint, Not a Compliance Checkbox
Data residency and state-controlled compute are becoming architectural constraints that narrow viable deployment topologies, so teams should model sovereignty as a design input rather than a procurement afterthought.
AngleContrast centralized API consumption with dedicated infrastructure where data processing, storage, and retention are bound to a controlled physical and legal boundary.
Source video ↗