The prompt injection via telemetry point is sharp. Same class of problem shows up whenever an agent reads structured data from an untrusted source — contract ABIs, API responses, even config files.
Observability is a good forcing function for thinking about this!(at least tracepoint data has a known schema. Unstructured sources are worse)
Observability is a good forcing function for thinking about this!(at least tracepoint data has a known schema. Unstructured sources are worse)