The threat model
Not yet published.
When it is, this page will hold it: What Valet defends against, from prompt injection to a confused model, and which mechanism handles each.
Planned: The risk table, threat model and injection-test results will be published.