AI May Recommend. Policy Must Commit
Traditional application security asks: who can access a resource? Agentic AI adds a harder question: what is the system allowed to do when it receives uncertain, incomplete, or maliciously influenced information?
An agent can be authenticated and authorized yet still unsafe. It may follow an instruction hidden in retrieved content, cite an outdated policy, use an overly broad tool, or confidently act beyond its intended authority. These are behavioral security failures—not merely endpoint failures.
This session introduces the LLM-SHIELD lens: Scope, Harden, Isolate, Empower, Live-Defend, and Demonstrate. It provides an architecture-first approach to securing AI capabilities across prompts, retrieval, context, tools, runtime policy, human oversight, and evidence.
Participants will walk through an agentic support workflow facing prompt injection, stale policy retrieval, excessive tool authority, and conflicting customer data. The goal is not to make AI timid. It is to make its actions admissible, contained, and provable.
Attendees will learn:
- Why traditional access control is necessary but insufficient for agents.
- How to prevent retrieval and tool-use failures from becoming business actions.
- How to enforce least authority for agentic workflows.
- How to produce evidence that survives an audit or customer dispute.
About Rohit Bhardwaj
Rohit Bhardwaj is a Director of Architecture working at Salesforce. Rohit has extensive experience architecting multi-tenant cloud-native solutions in Resilient Microservices Service-Oriented architectures using AWS Stack. In addition, Rohit has a proven ability in designing solutions and executing and delivering transformational programs that reduce costs and increase efficiencies.
As a trusted advisor, leader, and collaborator, Rohit applies problem resolution, analytical, and operational skills to all initiatives and develops strategic requirements and solution analysis through all stages of the project life cycle and product readiness to execution.
Rohit excels in designing scalable cloud microservice architectures using Spring Boot and Netflix OSS technologies using AWS and Google clouds. As a Security Ninja, Rohit looks for ways to resolve application security vulnerabilities using ethical hacking and threat modeling. Rohit is excited about architecting cloud technologies using Dockers, REDIS, NGINX, RightScale, RabbitMQ, Apigee, Azul Zing, Actuate BIRT reporting, Chef, Splunk, Rest-Assured, SoapUI, Dynatrace, and EnterpriseDB. In addition, Rohit has developed lambda architecture solutions using Apache Spark, Cassandra, and Camel for real-time analytics and integration projects.
Rohit has done MBA from Babson College in Corporate Entrepreneurship, Masters in Computer Science from Boston University and Harvard University. Rohit is a regular speaker at No Fluff Just Stuff, UberConf, RichWeb, GIDS, and other international conferences.
Rohit loves to connect on http://www.productivecloudinnovation.com.
http://linkedin.com/in/rohit-bhardwaj-cloud or using Twitter at rbhardwaj1.