Giving an AI Agent Write Access to Production: What I Learned the Hard Way
Production agent postmortem. What happened when an autonomous agent dropped a production table, and the 5 security guardrails required for production write access.
38 articles tagged with Security
Production agent postmortem. What happened when an autonomous agent dropped a production table, and the 5 security guardrails required for production write access.
The boundary between software and operator has dissolved. Here is a technical analysis of GPT-5.6 Sol's native computer use API, OSWorld benchmarks, and visual prompt injection risks.
The AI ToS audit. How code retention clauses, telemetry logging, local AST indexing, and zero-data-retention (ZDR) APIs handle your intellectual property in 2026.
Learn how to build a secure, lightweight filesystem MCP server in Rust. Implement secure workspace boundaries and memory-safe file operations for AI agents.
Prevent malicious state injections in local-first apps. Learn how to implement public-key signing and verification for Loro CRDT update blobs.
Prevent remote code execution vulnerabilities in MCP. Learn how to configure isolated execution environments using Docker and Firecracker microVMs.
Learn how to secure client-side Model Context Protocol (MCP) gateways. Configure strict CORS policies, whitelist domains, and validate client origins.
Block unauthorized AI agent connections. Learn how to configure Nginx IP whitelists and Linux UFW firewalls to protect remote MCP servers.
Configure robust access controls for AI integrations. Learn how to implement JSON Web Token (JWT) validation for remote MCP server endpoints.
Learn how to secure remote Model Context Protocol (MCP) servers. Configure token-based access validation, SSE transport security, and TLS layers.
LLMs that write and execute code are powerful — and dangerous. Learn how WASM Component Model, WASI preview 2, and Wasmtime turn Node.js into a fortress for autonomous agent code execution.
Learn how to build a client-side execution sandbox using WebAssembly. Run untrusted Python code securely inside browser Web Workers with Pyodide and virtual filesystems.