How are you approaching security for self-hosted AI models in production?

As companies deploy Llama, Mistral, or custom models on their own infrastructure, new attack surfaces emerge—prompt injection, model poisoning, data exfiltration through embeddings. What security controls are you implementing that go beyond traditional application security?