What Sentinel caught when I attacked my own AI app
The short version I built two functionally identical AI chat applications on Microsoft Foundry. Same model, same code, same telemetry pipeline into the same Log Analytics table. One was hardened — keyless auth, private endpoints, guardrails in blocking mode. The other was deliberately weak — key auth, public endpoints, guardrails in annotate-only mode. Then I attacked both and measured what showed up. Over fourteen days the two applications logged 5,008 turns between them. Two findings stood out: ...