•6 min read
Agent Security as Its Own Product: One Reading, Held Loosely
OpenAI's news page lists \"Codex Security: now in research preview\" with almost no public detail. The headline cannot settle what the product is, so the...
Posts tagged with #security
← View all posts•6 min read
Codex Security and the Triage Problem
Codex Security entered research preview in March 2026, per the announcement. The capability worth examining is triage, not vulnerability discovery.
•5 min read
27 Seconds to Breakout: Why Identity Is the Only Perimeter Left
A reported 27-second lab breakout, from hijacked browser session to shell, sits outside what wall-based defense was built for. Per-action signed identity...
•4 min read
The Moat Moved to the Runtime
Evals, provenance, and execution controls are merging into the agent runtime. The advantage is shifting from model quality to who owns the deployment surface.
•4 min read
When Safety Moves Inside the Runtime
Agent safety is shifting from a bolt-on audit layer into the runtime itself, and that quietly changes where the competitive moat sits.
•6 min read
The Agent That Can Stop Is the Agent You Can Trust
For higher-risk agent workflows, pause-resume execution changes the trust model: agents can preserve state, request human approval at the risky step, then...
•5 min read
The AI Security Threat Is Already Here: It Just Looks Boring
Three supply chain incidents in six weeks expose a pattern: AI deployment velocity is breaking operational security. The risk isn't rogue superintelligence, it's a compromised pip package.
•3 min read
The Eval Layer Is Gone. It's Inside the Runtime Now.
Evals and security controls are being absorbed into the agent runtime. The moat is no longer model quality, it's control of the deployment surface.
•2 min read
When AI Safety Moves Down the Stack
Constitutional MCP isn't a security patch. It's an architectural shift that will fracture the MCP ecosystem in two, and eliminate third-party agent firewall services overnight.