security

A security design question that decides whether enterprise customers will sign. The answer has to make cross-tenant leakage impossible by construction, and then prove it with tests.

A principal-level platform question. Each team building its own agent stack means dozens of security models, cost blind spots and incompatible tools. The platform has to make the safe path the easy path without slowing teams down.

The top entry on the OWASP list for LLM applications. A PM should be able to explain it in a minute, distinguish the direct and indirect forms, and explain why it changes how products are designed.

A common event with a calm answer. The leak itself is usually not the problem; what the prompt contained and what it was being trusted to do might be.

Text-to-SQL demos are easy and dangerous. The interviewer wants the controls that stop wrong numbers, data leaks and runaway queries, and a design that makes answers checkable.

The tool choice is the easy part. Interviewers screen for how you decide on evidence, what you allow near code and data, and how you stop prototypes becoming unowned production code.

A tenth of apps in one audit exposed their database to anyone. Check access control on every table, keys in the client, auth with a second account and an owner for the findings before any customer sees the link.