<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"><url><loc>https://seanmcquilling.com/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/projects/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/work/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/blog/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/lab/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/daemon/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/about/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/colophon/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/categories/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/series/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/projects/aria/</loc><lastmod>2026-08-12</lastmod></url><url><loc>https://seanmcquilling.com/projects/cadre/</loc><lastmod>2026-08-12</lastmod></url><url><loc>https://seanmcquilling.com/projects/fai/</loc><lastmod>2026-08-12</lastmod></url><url><loc>https://seanmcquilling.com/projects/niamh/</loc><lastmod>2026-08-12</lastmod></url><url><loc>https://seanmcquilling.com/projects/omnissiah/</loc><lastmod>2026-08-12</lastmod></url><url><loc>https://seanmcquilling.com/projects/sadhbh/</loc><lastmod>2026-08-12</lastmod></url><url><loc>https://seanmcquilling.com/blog/a-pentest-story-is-not-authorization/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/blog/prompt-injection-testing-belongs-in-ci/</loc><lastmod>2026-08-17</lastmod></url><url><loc>https://seanmcquilling.com/blog/disabled-is-not-removed/</loc><lastmod>2026-08-17</lastmod></url><url><loc>https://seanmcquilling.com/blog/telemetry-is-an-instruction-channel/</loc><lastmod>2026-08-17</lastmod></url><url><loc>https://seanmcquilling.com/blog/your-agent-config-is-executable-code/</loc><lastmod>2026-08-12</lastmod></url><url><loc>https://seanmcquilling.com/blog/the-range-was-not-a-boundary/</loc><lastmod>2026-08-04</lastmod></url><url><loc>https://seanmcquilling.com/blog/seventeen-thousand-actions-one-detection-contract/</loc><lastmod>2026-08-04</lastmod></url><url><loc>https://seanmcquilling.com/blog/red-blue-green-who-can-change-production/</loc><lastmod>2026-08-04</lastmod></url><url><loc>https://seanmcquilling.com/blog/a-public-api-of-me/</loc><lastmod>2026-07-29</lastmod></url><url><loc>https://seanmcquilling.com/blog/when-the-attacker-is-a-model-passing-a-test/</loc><lastmod>2026-07-28</lastmod></url><url><loc>https://seanmcquilling.com/blog/five-models-one-hallucination/</loc><lastmod>2026-07-28</lastmod></url><url><loc>https://seanmcquilling.com/blog/nine-of-fourteen-two-that-alert/</loc><lastmod>2026-07-28</lastmod></url><url><loc>https://seanmcquilling.com/blog/detecting-the-confused-deputy-in-azure-devops-mcp/</loc><lastmod>2026-07-27</lastmod></url><url><loc>https://seanmcquilling.com/blog/what-hermes-changed-in-post-exploitation/</loc><lastmod>2026-07-27</lastmod></url><url><loc>https://seanmcquilling.com/blog/governing-microsoft-foundry-with-citadel/</loc><lastmod>2026-07-26</lastmod></url><url><loc>https://seanmcquilling.com/blog/the-agentic-attack-surface-does-not-stay-still/</loc><lastmod>2026-07-22</lastmod></url><url><loc>https://seanmcquilling.com/blog/mitre-atlas-for-aisecops/</loc><lastmod>2026-07-18</lastmod></url><url><loc>https://seanmcquilling.com/blog/owasp-agentic-top-10-for-aisecops/</loc><lastmod>2026-07-18</lastmod></url><url><loc>https://seanmcquilling.com/blog/owasp-llm-top-10-for-aisecops/</loc><lastmod>2026-07-18</lastmod></url><url><loc>https://seanmcquilling.com/blog/nist-ai-rmf-for-aisecops/</loc><lastmod>2026-07-18</lastmod></url><url><loc>https://seanmcquilling.com/blog/zero-trust-is-the-foundation-ai-agents-need/</loc><lastmod>2026-07-18</lastmod></url><url><loc>https://seanmcquilling.com/blog/a-feature-is-not-shipped-until-it-works/</loc><lastmod>2026-07-16</lastmod></url><url><loc>https://seanmcquilling.com/blog/when-agent-autonomy-produces-activity/</loc><lastmod>2026-07-16</lastmod></url><url><loc>https://seanmcquilling.com/blog/research-agents-need-a-consumer/</loc><lastmod>2026-07-16</lastmod></url><url><loc>https://seanmcquilling.com/blog/the-observer-changes-the-agent/</loc><lastmod>2026-07-16</lastmod></url><url><loc>https://seanmcquilling.com/blog/the-bigger-model-lost-the-bakeoff/</loc><lastmod>2026-07-16</lastmod></url><url><loc>https://seanmcquilling.com/blog/agentic-ai-field-notes/</loc><lastmod>2026-07-14</lastmod></url><url><loc>https://seanmcquilling.com/blog/security-notes-for-local-agents/</loc><lastmod>2026-07-14</lastmod></url><url><loc>https://seanmcquilling.com/blog/pattern-library-for-tool-calling/</loc><lastmod>2026-07-14</lastmod></url><url><loc>https://seanmcquilling.com/tags/agent-security/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/agents/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/ai-toolchain/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/aisecops/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/architecture/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/authorization/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/autonomous-remediation/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/autonomy/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/azure-ai-foundry/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/behavior/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/ci-cd/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/containment/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/data-exfiltration/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/dependency-risk/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/detection-engineering/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/developer-security/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/evals/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/evaluation/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/evaluations/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/frameworks/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/governance/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/incident-response/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/kubernetes/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/least-agency/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/lifeos/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/llm-security/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/local-agents/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/local-first/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/macos/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/mcp/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/microsoft-foundry/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/mitre-atlas/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/models/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/nist/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/observability/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/owasp/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/patterns/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/pipelines/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/prompt-injection/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/ransomware/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/research/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/saas-security/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/security/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/slopsquatting/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/supply-chain/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/telemetry/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/testing/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/threat-intelligence/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/threat-modeling/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/tool-calling/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/voice/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/tags/zero-trust/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/categories/agentic-ai/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/categories/cybersecurity/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/categories/research/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/series/agent-evaluation-incidents/</loc><lastmod>2026-07-16</lastmod></url><url><loc>https://seanmcquilling.com/series/agent-security-foundations/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://seanmcquilling.com/series/aisecops-frameworks/</loc><lastmod>2026-07-26</lastmod></url><url><loc>https://seanmcquilling.com/series/detection-contracts/</loc><lastmod>2026-08-17</lastmod></url></urlset>