A security talk that gets past the toy chatbot stage and into file uploads, RAG stores, agent tools, observability apps, and the unglamorous places where prompts become someone else's problem. The strongest thread is the repeatability caveat, since a single successful prompt is not much of a finding when the system answers differently on the next run. Worth it for the shift from magic words to input inventory, telemetry, and boring evidence.