Agent Security
11 essays tagged with Agent Security.
AI Agents as Insider Risks: What Nadella's Trust Architecture Requires
A research-backed analysis of Satya Nadella's AI insider-risk argument: external authorization, reasoning transparency, agent-to-agent provenance, independent evidence, and the limits of emergency stops.
Bedrock Managed Agents: What Moving the Harness Into AWS Actually Changes
A research assessment of AWS's OpenAI-powered managed-agent preview: harness placement, microVMs, execution roles, session lifetime, and deployment acceptance.
NVIDIA OpenShell and Sentry: Containment Needs an Independent Boundary
A research assessment of NVIDIA's September 28 Open Agent Safety Platform: software enforcement, an out-of-band watchdog, assurance boundaries, and falsifiable containment tests.
Harness Engineering on September 26, 2026: From Agent Loops to Personal-Agent Operating Systems
A current practitioner field report on harness engineering through September 26, 2026: Meta Muse, JAZ’s minimalist harness, event-sourced coding agents, agentic-commerce access disputes, embodied agents, and the next research questions.
HarnessRisk in Practice: Turn the Agent Lifecycle Into a Security Test Matrix
A deep implementation guide to lifecycle security testing for agent harnesses: configuration, extensions, runtime, persistence, actions, recovery, evidence oracles, and release gates.
Harness Engineering in August 2026: The Control Plane Gets Measured
A source-backed state of the field on harness engineering: what shipped, what the newest research measured, what practitioners are debating, and the roadmap from agent loops to proof-carrying runtimes.
DeepSeek Harness: Everything Is a Plugin—Except Trust
A source-code critique of DeepSeek Harness and Cordis: why an everything-is-a-plugin runtime matters, where reversibility stops, and why self-evolution still needs an immutable control plane.
The AI Agent Access Graph: What CISOs Need to See
AI agents compose identities, tools, data, and delegated authority. Build the access graph, drift alerts, and revocation controls your CISO needs.
Red-Team Agent Hijacking: Build a Security Eval Gate for Repeat Attacks
A practical agent-hijacking evaluation harness: scenario design, adaptive and repeated attempts, path-aware metrics, deterministic release gates, and production replay.
Threat-Model an AI Agent: Sources, Sinks, Authority, and Blast Radius
A practical AI agent threat-modeling method that maps untrusted sources to dangerous sinks, then constrains identity, authority, data, and blast radius at deterministic runtime boundaries.
Secure the MCP and Tool Supply Chain: Trust Must Be Continuous
MCP tool descriptions enter the agent's decision loop. Use this attack trace, control scorecard, and policy to stop metadata from becoming authority.