Chapter 11 · Part 2: Input and context attacks
Vector and ranking attacks undermine similarity-as-trust assumptions.
Frameworks: MITRE ATLAS · OWASP LLM Top 10
Layers: context-assembly
Public practitioner doctrine. Free doctrine. Open knowledge. Paid enforcement.