Security & privacy

1. Sep 30, 2026

   EmDash 1.0 separates plugin catalogs from publishing

   EmDash 1.0 separates author identity, signed releases, plugin discovery, and runtime permissions. Installers verify records independently.

   Projects & practice Developer tools MCP & skills Security & privacy Web development

   English
2. Sep 30, 2026

   Agents API browser auth keeps passwords out of model input

   How Agents API separates site approval, login credentials, and screenshots, and why network access and site approval cannot replace action-level confirmation.

   Technical articles Agents Security & privacy Runtime & infrastructure

   English
3. Sep 29, 2026

   OpenShell enforces agent permissions outside the workload

   NVIDIA OpenShell places sandbox, network, credential, and policy controls outside the agent workload, with a Supervisor enforcing permission boundaries.

   Projects & practice Security & privacy Agent engineering Runtime & infrastructure

   English
4. Sep 28, 2026

   Keep review evidence separate from compacted agent context

   Independent Codex Guardian history shows why generation context and review evidence need separate records, with provenance through resume and rollback.

   Learning guides Agent engineering Memory & context Evaluation Security & privacy

   English
5. Sep 27, 2026

   Company Brain separates team memory permissions

   Company Brain scopes team-agent memory by room and user permissions, with personal authorization, traceable sources, and separate tool-write access.

   Projects & practice Memory & context Security & privacy Agents

   English
6. Sep 26, 2026

   Why agent network permissions need ongoing checks

   Codex network policy changes explain revocable permits for redirects, long responses, and WebSockets, and why tool and network permissions need separate layers.

   Learning guides Security & privacy Runtime & infrastructure Agent engineering

   English
7. Sep 26, 2026

   GitHub Agentic Autofix starts retaining repair experience

   GitHub Agentic Autofix reads and writes Copilot Memory. How security repair knowledge crosses agent workflows, and why verification, scope, and expiry matter.

   Technical articles Memory & context Security & privacy Developer tools

   English
8. Sep 25, 2026

   GitHub Security Lab makes fuzzing an agent feedback loop

   GitHub Security Lab Fuzzing Taskflow uses coverage gaps to guide model decisions while deterministic tools execute, measure, and persist results.

   Projects & practice Security & privacy Agent engineering Evaluation

   English
9. Sep 24, 2026

   Link CLI lets agents pay without real card numbers

   Stripe Link CLI separates purchase intent from payment permission. Agents request a purchase and receive one-time credentials only after user approval.

   Projects & practice Agents Security & privacy Finance

   English
10. Sep 22, 2026

    Why pinning a Git SHA can still run different code

    Plugin4Shell exposes a supply-chain gap: a pinned SHA records the expected version, but installers must also verify the actual HEAD after checkout.

    Learning guides Security & privacy Developer tools MCP & skills

    English
11. Sep 20, 2026

    OpenCloak: replace personal data before sending it to AI

    OpenCloak replaces names, emails, and other personal data with stable stand-ins locally, then restores them when the model responds.

    Projects & practice Security & privacy Developer tools

    English
12. Sep 19, 2026

    Anthropic opens internal processes to embedded evaluators

    Anthropic and Accenture extend evaluation beyond model outputs to training, deployment, monitoring, and incident processes, with independence unresolved.

    Technical articles Evaluation Security & privacy AI research

    English
13. Sep 18, 2026

    Where agent credentials belong: host, vault, and broker

    Where keys belong when coding agents call GitHub, databases, and cloud APIs, and how vaults and credential brokers define access boundaries.

    Learning guides Security & privacy Agent engineering Runtime & infrastructure

    English
14. Sep 11, 2026

    Google packages Skills and MCP in one plugin

    How the Google Cloud Developer Plugin packages Skills, MCP configuration, and rules, and what this means for distribution, versions, and permissions.

    Technical articles MCP & skills Developer tools Security & privacy

    English
15. Sep 11, 2026

    OpenCompany: version-controlled agent configuration

    OpenCompany uses company.toml, agent teams, and human sign-off to put organizational structure and agent configuration into version-controlled files.

    Projects & practice Multi-agent systems Agent engineering Security & privacy

    English
16. Sep 10, 2026

    Agentic search missed an incident. Test the eval too

    The Anthropic incident review shows why automated monitors and LLM graders need coverage, independence, and tests for their own failure modes.

    Technical articles Evaluation Security & privacy AI research

    English
17. Sep 8, 2026

    Coding agent security is now a supply-chain problem

    Coding agents read and execute skills, MCP tools, dependencies, and repository instructions. These need software supply-chain controls.

    Technical articles Security & privacy MCP & skills Developer tools

    English
18. Sep 8, 2026

    GitHub Agentic Workflows: agents inside GitHub Actions

    How GitHub Agentic Workflows puts judgment-based automation inside GitHub Actions while retaining permissions, controlled outputs, approval, and security.

    Projects & practice Agents Developer tools Security & privacy

    English
19. Jun 16, 2026

    Sandbox isolation: boundaries, implementations, and practice

    How sandboxes limit untrusted code access to files, processes, networks, and resources, comparing VMs, containers, user-space kernels, and syscall filters.

    Learning guides Security & privacy Runtime & infrastructure

    English

No long-form articles match this language.