AI Agent Security
Threat Model: Agent-to-Agent Delegation Abuse
When AI agents delegate tasks to each other, the delegation chain becomes an attack surface. How to threat-model and contain A2A delegation abuse.
Blog
Insights & updates
AI agent security, identity, governance, cost, and the engineering behind the control plane.
Platform & Operations
Webhook Security: Signing and Verifying Events
HMAC signatures plus timestamp replay windows are the minimum bar for secure webhooks — here's why unsigned endpoints are dangerous and how to fix them.
Platform & Operations
OTLP Telemetry Ingest for Agent Discovery
You cannot govern agents you do not know about. OpenTelemetry ingest turns existing instrumentation into an agent inventory. Learn what the ingest path has to solve, the tenant-isolation trap, and how discovery becomes governance.
AI FinOps
Token Usage Forecasting and Capacity Planning
Agent spend is forecastable if you model it as volume times cost per task rather than extrapolating a total. Learn the decomposition, the non-linearities that break naive projections, and what to plan for.
Platform & Operations
Versioning and Rollback for AI Agents
Version AI agent workflows like code, diff changes between snapshots, and roll back safely when a new version causes regressions or runaway costs in production.
AI FinOps
Prompt Caching: Cutting Agent Inference Cost
Agent loops resend the same context on every step, which is exactly what prompt caching is for. Learn how to structure prompts for cache hits, what invalidates them, and the security considerations.
Platform & Operations
Dead-Letter Queues for Failed Agent Jobs
A dead-letter queue nobody watches is a place where work goes to be forgotten. Learn what belongs in a DLQ, how to alert on it, and how to replay safely once the cause is fixed.
AI Agent Security
Incident Response for AI Agent Breaches
A practical incident response runbook for AI agent breaches: contain damage, revoke credentials, investigate with tamper-evident audit trails, and recover.
Platform & Operations
Threat Model: Over-Broad MCP Tool Scope
Over-broad MCP tool permissions give attackers an amplified attack surface. Learn the failure modes and control classes that shrink the blast radius.
AI Governance & Compliance
Maker-Checker for Platform Administration
Any administrative action a single person can both request and approve is not controlled. Learn where maker-checker belongs in an AI platform, how self-approval sneaks back in, and how to keep it usable.
Platform & Operations
Benchmarking Agents: What Public Numbers Can and Cannot Tell You
Public agent benchmarks are useful for narrowing a shortlist and misleading as a selection criterion. Learn what they measure, how contamination distorts them, and how to benchmark against your own workload.
AI Governance & Compliance
PII Detection and Redaction in AI Pipelines
Detect and redact PII before it reaches AI models or persists in logs — covering entry points, detection techniques, redaction strategies, and compliance.
AI FinOps
Credit Wallets for Agent Payments
Agents that transact need a spend mechanism with reservations, atomicity, and idempotency. Learn the ledger design that makes agent payments auditable and the concurrency bugs that make them wrong.
Platform & Operations
Retries and Idempotency in Agent Workflows
At-least-once delivery plus agents that take real actions equals duplicate side effects. Learn where idempotency keys belong, why retries are a cost multiplier, and how to make replay safe.
AI Agent Security
Federated AI: Sharing Agents Without Sharing Data
How signed trust manifests and scoped admission controls let organizations share AI agents across boundaries without exposing data or credentials.
AI Strategy
How to Roll Out AI Agents Safely
A staged rollout playbook for AI agents: inventory risk, run a scoped pilot with guardrails in place, define go/no-go criteria, and expand on evidence.
AI Agent Security
Trust Scoring Models for Autonomous Agents
How agent trust scoring models aggregate identity, behavior, and attestation signals into a runtime gate that controls what autonomous agents can do.
AI Agent Security
Tool-Use Safety: Sandboxing Agent Actions
Contain what AI agent tools can do: tool-level scoping, allow-lists, dry-runs, and human approval gates for high-consequence irreversible actions.
Platform & Operations
How to Rate-Limit AI Agents
Design abuse-resistant rate limits for AI agents: choose the right unit, window shape, and enforcement scope to protect costs and downstream systems.
AI Governance & Compliance
Designing Guardrails: Block, Redact, or Warn?
Choose the right enforcement action for AI agent guardrails — block, redact, or warn — and understand the fail-open vs fail-closed security trade-off.
AI Governance & Compliance
Audit Trails That Hold Up: Cryptographic Integrity
What makes an audit trail credible to an auditor or court: hash-chaining, per-row digital signatures, and external anchoring explained for engineering teams.
AI Governance & Compliance
How to Keep PII Out of Agent Prompts and Logs
Keep PII out of AI agent prompts, responses, and logs using detection-and-redaction controls that satisfy GDPR, HIPAA, and audit requirements.
AI Agent Security
Secrets Management for AI Agents
Keep API keys and credentials out of agent prompts and source code. The four pillars of secrets management: storage, delivery, access control, and rotation.
Identity & Access
RBAC vs ABAC for AI Platforms
RBAC governs who can configure agents; ABAC governs what agents can do per request. Learn which model fits each authorization decision on an AI platform.