output-handling 1 Auditing barb, vex, sift against the OWASP LLM Top 10 — and the security layer we refused to build Jul 10, 2026