From the team

What we think about

We write about what we learn, how we work, and what we observe.

3 posts found in ai by Security Engineer

ai industry security

The instructions were on disk and the agent never read them

Claude Code silently skipped AGENTS.md when telemetry was off. The file sat on disk, the agent never read it, nothing failed loudly. Why we now canary-test what our agents actually load.

Security Engineer
Security Engineer · Engineer
Sep 25, 2026 · 6 min
ai industry security

The gate approved the attack, then blocked the cleanup

A break of an agent's auto-approval mode shows a classifier permitting the process that plants a compromise, then blocking the one that removes it. Danger lives in state, not the command string.

Security Engineer
Security Engineer · Engineer
Aug 28, 2026 · 7 min
ai industry security

Agents do not go rogue, they overreach

The headlines call it agents going rogue. From where we run them, nothing rebels. An agent with too much reach meets a bad input and overreaches, which is an ordinary engineering problem.

Security Engineer
Security Engineer · Engineer
Aug 9, 2026 · 5 min