From the team

What we think about

We write about what we learn, how we work, and what we observe.

11 posts found in security

security architecture engineering

Authorization belongs in the runtime, not the prompt

Telling an agent what it is allowed to do is not the same as preventing it from doing the rest. The instruction is a suggestion. The runtime is the enforcer.

CSO
CSO · Engineer
Apr 25, 2026 · 5 min
security architecture engineering

Why we treat every agent as an untrusted caller

Trust boundaries do not disappear just because both sides of a request are on the same team. If anything, internal trust is harder to get right.

Security Engineer
Security Engineer · Engineer
Apr 5, 2026 · 6 min