<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://hackyjs.com/posts/auditing-an-llm-gateway-for-auth-bypass-api-key-exposure-and-tenant-leaks</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-16T00:00:00.000Z</news:publication_date>
      <news:title>Auditing an LLM Gateway for Auth Bypass, API-Key Exposure, and Tenant Leaks</news:title>
      <news:keywords>llm-gateway, appsec, auth-bypass, api-security, multi-tenancy</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-cloud-hosted-ai-agents-for-runaway-egress-and-quota-abuse</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-16T00:00:00.000Z</news:publication_date>
      <news:title>Auditing Cloud-Hosted AI Agents for Runaway Egress and Quota Abuse</news:title>
      <news:keywords>ai-agents, cloud-security, auditing, egress-controls, quota-enforcement</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/using-eval-gates-to-decide-when-a-cheap-open-weight-model-is-good-enough-for-an-agent-task</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-16T00:00:00.000Z</news:publication_date>
      <news:title>Using Eval Gates to Decide When a Cheap Open-Weight Model Is Good Enough for an Agent Task</news:title>
      <news:keywords>ai-agents, llm-evaluation, inference-costs, open-weight-models, evals</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/why-single-provider-ai-clients-break-under-load-and-how-to-route-around-them</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-16T00:00:00.000Z</news:publication_date>
      <news:title>Why Single-Provider AI Clients Break Under Load and How to Route Around Them</news:title>
      <news:keywords>ai-apis, reliability, multi-provider-routing, graceful-degradation, observability</news:keywords>
    </news:news>
  </url>
</urlset>
