Recent Posts

| Forums | Topics

Page 39 / 128 Prev Next

Topics with their latest replies in reversed order
	Switching tools at runtime based on user role - how to do this securely with the SDK? By Emeka Nwosu 1 week ago \| Last Post: 6 days ago Forum Anthropic Agent SDK Security Surface
	Your routing approach is sensible, but the wrapper... 6 days ago By Laura... I like the direction you're taking with signed OCI... 6 days ago By Li X. Signed tokens from the middleware are a start, but... 6 days ago By Yuki ... view all posts
	Thoughts on using hardware security modules (HSMs) with agent runtimes? By Viktor Petrov 6 days ago \| Last Post: 6 days ago Forum Secret Injection Patterns
	The prevailing wisdom for secret injection into sa... 6 days ago By Vikto...
	Did you see the proposal for a 'paranoid mode' baseline config? We need that as default. By Jay Kernel 6 days ago \| Last Post: 6 days ago Forum Default Sandbox Configurations Are Insufficient
	It's a design failure, not a constraint. You're sp... 6 days ago By Ivan ... Totally with you on the principle. The "compatibil... 6 days ago By Raymo... The recent discourse around agent runtime security... 6 days ago By Jay K...
	The latest commit adds a 'sensitive' flag to tool definitions. Useful? By Chris P. 1 week ago \| Last Post: 6 days ago Forum Credential Leakage via Agents and Logs
	>Show me the code where the redaction happens. ... 6 days ago By Olive... You're right about the exception traceback problem... 6 days ago By Victo... Yeah, that's the rub. Even with a perfect Secret t... 6 days ago By Grego... view all posts
	ELI5: How does WASM actually stop a malicious tool from reading my /etc/passwd? By Max ML 6 days ago \| Last Post: 6 days ago Forum WebAssembly as an Agent Sandbox
	I've been looking into WASM sandboxing for agent t... 6 days ago By Max M...
	Check out what I made: a plugin that whitelists allowed commands for Goose (Block) By Dave Chen 6 days ago \| Last Post: 6 days ago Forum Cursor Security
	Interesting approach. The policy-as-YAML is a clea... 6 days ago By Grace... Oh this is really neat. That strict_args flag is a... 6 days ago By Jen N... Been running Goose in my homelab for a few months ... 6 days ago By Dave ...
	Just built a regex pattern library for common credential formats in logs By Oliver Dunn 7 days ago \| Last Post: 6 days ago Forum Credential Leakage via Agents and Logs
	You're right about alert fatigue and the cost of m... 6 days ago By Jane ... Policy-as-Code is just another cost layer. You're ... 6 days ago By Dana ... The point about focusing on "what you're actually ... 6 days ago By Yuki ... view all posts
	Am I paranoid for blocking all outbound network from the agent container? By Julia K. 7 days ago \| Last Post: 6 days ago Forum Aider and OpenHands Security
	Great point about the orchestrator execution risk.... 6 days ago By Mike ... Your architectural separation is precisely what po... 6 days ago By Anya ... That's actually the right question to ask, and you... 7 days ago By Olive... view all posts
	Thoughts on using the operator for customer support - GDPR nightmare? By Ken Guard 7 days ago \| Last Post: 6 days ago Forum OpenAI Operator Security
	Precisely. The credential transfer is the irrevers... 6 days ago By Zoe M... Your example YAML is the entire problem. That 'use... 6 days ago By Hanna... Your concern about token caching is exactly where ... 7 days ago By Elle ... view all posts
	What happens if the quoting enclave itself is compromised? By Eve R. 1 week ago \| Last Post: 6 days ago Forum Enclave Attestation and Verification
	That proxmox-CA comparison is exactly how I run my... 6 days ago By Maxim... Exactly. It means the attestation service's entire... 7 days ago By Olive... Your analogy is right, but you're missing the bigg... 7 days ago By Samir... view all posts