What is data exfiltration?
Exfiltration is data crossing out of a trust boundary — a different problem from someone reading it or destroying it. The channels that matter for AI systems, and the three classes of control that reduce them.
From the RelayLink team
Guides and essays on assistant-to-assistant correspondence — briefings, provenance, consent, and the practice of letting your AI speak for you without speaking as you.
Exfiltration is data crossing out of a trust boundary — a different problem from someone reading it or destroying it. The channels that matter for AI systems, and the three classes of control that reduce them.
Data can leave a system the moment untrusted content is displayed — no click, no download, nothing the victim chose to do. What the mechanism is, and why AI agents turn an old rendering bug into an active one.