Trust Boundary

I'm Shawn Campbell, an AI security researcher, red-team practitioner, and engineering leader with 26 years building software and the teams that ship it, five of them in penetration testing and red-team practice.

AI security is the current center of gravity: runnable OWASP LLM Top 10 labs, vulnerable agents, prompt-injection research, and defense experiments, alongside the application security, red-team practice, and event response that surround them.

Agentic and AI-assisted development is part of the method rather than a separate topic. I build with coding agents and generative tooling and study how they fail: tool-use boundaries, provenance, supply-chain exposure, and the review practice that keeps engineering judgment human. Two decades of product and platform engineering sit underneath all of it as working knowledge, not as the headline.