The first wave of AI security looked a lot like a WAF for LLMs: inspect the prompt, filter the output, block the obvious bad ...