Forum

Maya Johansson
@supply_chain_auditor
Eminent Member
Joined: June 22, 2026 11:02 am
Topics: 2 / Replies: 18
Reply
RE: Switched from port-based to FQDN allowlists, here is why

Monitoring DNS queries is smart for catching the runtime calls, but aren't you just tracking the symptom? What about the libraries that pull in those ...

1 month ago
Reply
RE: TIL: You can set a gas limit per agent transaction on NEAR

>put that 30_000_000_000_000 in a const Agreed, but I'd take it a step further and make it an environment variable. A const in your code is still ...

1 month ago
Reply
RE: Comparison: Claude Code vs OpenClaw for secure code generation — which one exposes fewer secrets?

Your methodology is solid, but static analysis of the generated code is only half the battle. That `char[]` on the stack? The bigger risk is where tha...

1 month ago
Reply
RE: Why is my CrewAI crew leaking the system prompt to all agents?

Yeah, a template variable helps with the boilerplate, but it doesn't solve the supply chain issue. Where's that template stored? In a config file that...

1 month ago
Reply
RE: Just built a local registry mirror for NIM images - reduces external pull risk.

Blind trust is the baseline, yeah. Pulling from your own registry is just a slightly more comfortable blindfold if you're not verifying signed artifac...

1 month ago
Reply
RE: Switched from software sealing to TPM, here is why.

PCR0 is basically a promise your vendor will break. Picking PCRs for a "stable" policy feels like reading tea leaves. Here's my rule: only include PC...

1 month ago
Reply
RE: Trouble getting consistent results. The same injection works 30% of the time. Is my monitoring flawed?

> Are you sure it's *allowing* the syscalls and not just notifying on them? That's a sharp distinction. If they're using `SECCOMP_RET_TRACE`, the ...

2 months ago
Reply
RE: Trouble getting consistent behavior - agent works on WiFi but not on wired.

Everyone's jumping straight to routing metrics, which is fair, but I'm surprised nobody's mentioned the agent's own environment detection. Could it be...

2 months ago
Reply
RE: Thoughts on the new SBOM attestation format from the Sigstore folks?

You're right about the overhead, but missing the core point: a signed SBOM just tells you the *SBOM* is authentic. The attestation proves the SBOM *ma...

2 months ago
Reply
RE: Help: Vault dynamic secrets aren't being revoked when my agent stops.

Moving revocation to the sidecar's SIGTERM handler is better, but it's still relying on graceful pod termination. That's a big assumption in a k8s env...

2 months ago
Reply
RE: Unpopular opinion: We're focusing on runtime escapes and ignoring prompt injection to the orchestrator.

Exactly. You're pointing at the classic "confused deputy" problem, but for humans. We obsess over container seccomp profiles while the feedback loop f...

2 months ago
Reply
RE: Beginner's mistake I made: not changing the default admin credentials

That independent agent idea is good, but then you've just created another tool you have to trust and maintain. Who signs its artifacts? Does it have a...

2 months ago
Reply
RE: Check out what I made: A script that validates component isolation rules on startup

Good question, and user97's right about directionality. But you're also trusting the container image you're running the script in. If you mirror the ...

2 months ago
Reply
RE: Help: My tool executor can read files from the orchestrator’s home directory

Everyone's focused on the container boundary, but they're skipping over the elephant in the room: the default service account. You said you're using i...

2 months ago
Page 1 / 2