<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.sitemaps.org/schemas/sitemap/0.9 http://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd" xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://avneeshk.me/blog/guardrails-belong-in-the-server/</loc>
<lastmod>2026-07-02T09:00:00+00:00</lastmod>
</url>
<url>
<loc>https://avneeshk.me/blog/stdout-is-not-yours/</loc>
<lastmod>2026-07-02T14:00:00+00:00</lastmod>
</url>
<url>
<loc>https://avneeshk.me/blog/building-mcploitable/</loc>
<lastmod>2026-07-15T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://avneeshk.me/blog/hugging-face-agentic-breach/</loc>
<lastmod>2026-07-20T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://avneeshk.me/blog/why-does-agentforce-take-orders-from-a-web-form/</loc>
<lastmod>2026-10-01T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://avneeshk.me/blog/why-did-an-eval-agent-end-up-in-a-medicare-portal/</loc>
<lastmod>2026-10-14T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://avneeshk.me/blog/tags/agentic/</loc>
</url>
<url>
<loc>https://avneeshk.me/allowlist-bypass/</loc>
</url>
<url>
<loc>https://avneeshk.me/blog/</loc>
</url>
<url>
<loc>https://avneeshk.me/break-this-server/</loc>
</url>
<url>
<loc>https://avneeshk.me/colophon/</loc>
</url>
<url>
<loc>https://avneeshk.me/blog/corrections/</loc>
</url>
<url>
<loc>https://avneeshk.me/blog/tags/debugging/</loc>
</url>
<url>
<loc>https://avneeshk.me/blog/series/guardrails/</loc>
</url>
<url>
<loc>https://avneeshk.me/blog/tags/guardrails/</loc>
</url>
<url>
<loc>https://avneeshk.me/blog/tags/incident/</loc>
</url>
<url>
<loc>https://avneeshk.me/blog/series/incidents/</loc>
</url>
<url>
<loc>https://avneeshk.me/blog/tags/</loc>
</url>
<url>
<loc>https://avneeshk.me/</loc>
</url>
<url>
<loc>https://avneeshk.me/lab/</loc>
</url>
<url>
<loc>https://avneeshk.me/blog/tags/least-privilege/</loc>
</url>
<url>
<loc>https://avneeshk.me/blog/tags/mcp/</loc>
</url>
<url>
<loc>https://avneeshk.me/mcp/</loc>
</url>
<url>
<loc>https://avneeshk.me/owasp-top-10/</loc>
</url>
<url>
<loc>https://avneeshk.me/blog/tags/prompt-injection/</loc>
</url>
<url>
<loc>https://avneeshk.me/tool-poisoning/</loc>
</url>
<url>
<loc>https://avneeshk.me/you-are-the-model/</loc>
</url>
</urlset>
