#Tag
Posts tagged "ai-agents"
A typography rule turned out to be a supply-chain control
Zero-width Unicode lets an instruction file carry text a reviewer cannot see and a model's tokeniser still receives, and a campaign reported in May 2026 planted files built that way. The ASCII ban I wrote for tidy prose catches it, provided I remember how little a clean result proves.
Untrusted code belongs in a VM, not a namespace
A container isn't a security boundary - it's a process sharing the host kernel, wearing namespaces. For code you genuinely don't trust, that's not enough. Kata Containers give each pod its own microVM and guest kernel, with the kubectl ergonomics intact. Here's why, and what it costs.
An agent should never hold the key it's using
You want an AI agent that can actually do things - call APIs, touch real data. You also don't fully trust it. The resolution isn't a better sandbox; it's making sure the agent never possesses a credential at all. A broker holds the keys, mints short-lived capabilities, and gates every write behind a human. Here's the pattern.