Threat Modeling Context-Aware AI: A STRIDE Walkthrough

Context-aware AI has become the default architecture for grounding Large Language Models (LLMs) in private, enterprise data. It is also quietly one of the most attack-rich architectures to reach production in years: it combines untrusted user input, untrusted document content, a probabilistic model that follows instructions from both , and privileged access to internal data stores. Most teams threat model their APIs and their infrastructure.