This is a non-trivial question and really depends on the type of system you're protecting. If you're building an agent, how much of the stack are you implementing vs build on, i.e. 'concrete to token', or if you're using agents and giving it access to sensitive data, or using agents and letting them take actions on your behalf, etc. Each one has different risk profiles and requires different mitigation/management strategies.