Leanpub Header

Skip to main content
Go to Leanpub.com

Architecture Is The Control

An AI Product Security Field Manual: From Prompt to Operating Model

Architecture Is The Control
Codrut Andrei

Securing AI requires a system-level approach across models, data, identities, tools, infrastructure, and execution paths.

This book shows how to apply Product Security and Secure SDLC principles to AI-enabled products, from RAG and agents to MCP, evaluations, supply chain risk, runtime controls, and governance, while building the fundamentals needed for a practical AI Product Security operating model.

Minimum price

Free!

$29.99

You pay

Cause gets

$

Also available for 1 book credit with a Reader Membership

PDF
About

About

About the Book

Modern AI products are complex systems made up of models, prompts, retrieval pipelines, vector stores, APIs, identities, tools, agents, infrastructure, and traditional software components. Securing them therefore requires more than prompt injection testing, model evaluations, or another AI security checklist.

This book explains how to secure the entire AI product, starting with the fundamentals that still matter most: identity, authorization, secure design, dependency governance, isolation, release controls, and clear ownership. It then explores the risks introduced or amplified by AI, including RAG security, prompt injection, insecure output handling, model and supply chain risk, MCP and tool security, agentic systems, excessive agency, evaluations, and runtime controls.

The goal is to help Product Security, Application Security, engineering, architecture, and governance practitioners turn AI risks into security requirements, architecture decisions, tests, release gates, runtime guardrails, and evidence. The book ultimately brings these ideas together into an AI Product Security operating model designed to answer one critical question: what must be true before an AI-enabled system is allowed to ship, access, decide, and execute?

100% of the author’s earnings from this book will be donated to humanitarian and environmental causes. The first cause supported will be Tree-Nation, through its reforestation work.

Share this book

Categories

AI GovernanceArtificial IntelligenceSDLC-Testing

Feedback

Email the Author

Author

About the Author

Codrut Andrei

Codrut Andrei is a Director of Product Security with more than 18 years of experience across IT, cybersecurity, Application Security, Product Security, and secure software development.

He has built and scaled security capabilities from greenfield environments to enterprise operating models, working across complex technology organizations and helping engineering teams turn security requirements into practical decisions about what can safely be built, released, accessed, and operated.

His current work focuses increasingly on AI Product Security, AI governance, agentic systems, secure AI development, and the security implications of introducing models, retrieval systems, tools, autonomous agents, and machine identities into modern products.

Codrut writes and speaks regularly about Product Security, Secure SDLC, AI security, governance, and security operating models. His core belief is that security is not simply a collection of tools or controls. It is a decision system that determines what technology is allowed to ship, access, decide, and execute.

Through his writing, Codrut aims to help security practitioners move beyond AI security checklists and build the technical foundations, governance mechanisms, and Product Security operating models required for AI-enabled and increasingly autonomous systems.

Causes

Causes Supported

Tree-Nation

Tree-Nation Tree-Nation

Every royalty you share becomes a tree you can see

https://tree-nation.com
Tree-Nation is the largest reforestation platform enabling citizens and companies to plant trees around the world.
Tree-Nation’s mission is to reforest the world. The organisation offers people the possibility to select from over 300 different tree species which can be planted in 50 different reforestation projects located in 6 different continents. In every project, the species are carefully selected according to the specific benefits they bring for the environment and to the local population. Each tree planted on the Tree-Nation platform is assigned its own unique URL, which means the species, the location, the plantation project information and the CO2 compensation values can be tracked throughout the lifetime of the tree. Since its inception in 2006, more than 130,000 users and more than 2,200 companies have planted 5 million trees using its platform.

The Leanpub 60 Day 100% Happiness Guarantee

Within 60 days of purchase you can get a 100% refund on any Leanpub purchase, in two clicks.

See full terms...

Earn $8 on a $10 Purchase, and $16 on a $20 Purchase

We pay 80% royalties on purchases of $7.99 or more, and 80% royalties minus a 50 cent flat fee on purchases between $0.99 and $7.98. You earn $8 on a $10 sale, and $16 on a $20 sale. So, if we sell 5000 non-refunded copies of your book for $20, you'll earn $80,000.

(Yes, some authors have already earned much more than that on Leanpub.)

In fact, authors have earned over $15 million writing, publishing and selling on Leanpub.

Learn more about writing on Leanpub

Free Updates. DRM Free.

If you buy a Leanpub book, you get free updates for as long as the author updates the book! Many authors use Leanpub to publish their books in-progress, while they are writing them. All readers get free updates, regardless of when they bought the book or how much they paid (including free).

Most Leanpub books are available in PDF (for computers) and EPUB (for phones, tablets and Kindle). The formats that a book includes are shown at the top right corner of this page.

Finally, Leanpub books don't have any DRM copy-protection nonsense, so you can easily read them on any supported device.

Learn more about Leanpub's ebook formats and where to read them

Write and Publish on Leanpub

You can use Leanpub to easily write, publish and sell in-progress and completed ebooks and online courses!

Leanpub is a powerful platform for serious authors, combining a simple, elegant writing and publishing workflow with a store focused on selling in-progress ebooks.

Leanpub is a magical typewriter for authors: just write in plain text, and to publish your ebook, just click a button. (Or, if you are producing your ebook your own way, you can even upload your own PDF and/or EPUB files and then publish with one click!) It really is that easy.

Learn more about writing on Leanpub