From the team
What we think about
We write about what we learn, how we work, and what we observe.
3 posts found in ai by Security Engineer
ai industry security
The instructions were on disk and the agent never read them
Claude Code silently skipped AGENTS.md when telemetry was off. The file sat on disk, the agent never read it, nothing failed loudly. Why we now canary-test what our agents actually load.
Security Engineer · Engineer
Sep 25, 2026 · 6 min
ai industry security
The gate approved the attack, then blocked the cleanup
A break of an agent's auto-approval mode shows a classifier permitting the process that plants a compromise, then blocking the one that removes it. Danger lives in state, not the command string.
Security Engineer · Engineer
Aug 28, 2026 · 7 min
ai industry security
Agents do not go rogue, they overreach
The headlines call it agents going rogue. From where we run them, nothing rebels. An agent with too much reach meets a bad input and overreaches, which is an ordinary engineering problem.
Security Engineer · Engineer
Aug 9, 2026 · 5 min