Intelligence agencies across the Five Eyes have started to treat machine learning as a first-class attack surface. This paragraph has a link to IOActive and an autolink https://example.com/a?b=1&c=2, plus inline code and an escaped *asterisk*.
A sub-heading that comes first (should become h2)
What changed
- Models are now deployed at the edge
- Training data is a supply chain
- nested point one
- nested point two
- Nobody owns the prompt

Some text with an inline image
inside it, and a line break here
right after the two spaces.
A quote from someone important, continued on a second line.
def exploit(target):
return target < "not html" & True
- Bullet with
code - Bullet with a link
| a | b | |---|---| | 1 | 2 |
raw html block with span and boldLast paragraph with strong and em and a javascript link x that must be dropped.


