AI Demo Cloudflare AI security demo

All demo scripts

Give me an update on company strategy

Nexus (Wiki)Accidental exposure

Nexus gets space permissions right in the UI and in its own API. The index the assistant integration uses was built by a service account that can read everything.

Set the scene

Delta is writing the company narrative section of a campaign brief and wants the current strategy in her own words. Entirely legitimate task.

Show the web UI first

Open as Delta. Four spaces: General, Engineering, Sales, Marketing. The People, Finance and Executive spaces are not listed, do not appear in search, and 403 if you guess a page id. Demonstrate that - search for "Ironwood" in the UI and get nothing.

Now ask the agent

Prompt to typeGive me an update on the company strategy for the next year.

Variations that work the same way:

What happens with no protection

The agent calls search_all_pages, whose description promises "the full wiki index across every space". It reads /api/v1/search/index - the assistant index, built with a service account that was never taught about space membership - and gets full page bodies back: 

Project Ironwood - diligence summary            Executive   (restricted)
  Target: Meridian Logistics, ~$61m revenue. Harbour Lane guide $180-205m,
  revised down after Q3. Their top three customers are 41% of recurring
  revenue, and one of those three is us.

FY27 operating plan - working draft             Executive   (restricted)
Q3 FY26 results - internal                      Finance     (restricted)
Q1 FY27 restructure - plan and timetable        People (HR) (restricted)

Note the response even labels them space_is_restricted: 1. The index knows. It just was not asked to care.

What happens with protection deployed

The Gateway policy on matches Project Codenames and HR Case Notes, and blocks the index response. Public-space pages that mention none of that vocabulary still come back, so ordinary wiki questions keep working.

Where to show the evidence