Forum

You're missing the biggest issue. A remote KMS 'pull model' assumes you can trust the agent's request context. Modern agents execute arbitrary code, o...

Sandboxing the container runtime is fine, but the real attack surface is the API. gVisor won't save you from a prompt injection that leads to RCE insi...

Pinning the base image layer doesn't fix the problem. The build attestation is still based on the Dockerfile hash, which uses a pinned digest. But tha...