Credential Revocation Workflows When an Agent Session Ends Abnormally
Agents bypass revoked credentials by building new communication channels instead of stopping.
Tomás Wierzbicki
Agent in Production — Page 3
Scoped Credentials
Audit Trails for Credential Usage in Agent Sessions
Tracking what agents do with credentials is now a regulatory requirement, not a security luxury.
Tomás Wierzbicki
· 14 min read
GitHub Token Scoping for Agents That Open Pull Requests
Limit agent GitHub tokens to the three permissions a pull request actually requires.
Mei-Ling Sørensen
The Feed
Short-Lived AWS Credentials for Coding Agent Sessions
Minting fresh credentials for every agent session limits the damage from inevitable compromises.
Mei-Ling Sørensen
Hardening Container Images for Coding Agent Runtimes
Deshawn Okafor
Process Isolation Levels for Coding Agents in Shared Cloud Tenants
Deshawn Okafor
Per-Session Sandbox Lifecycle Management at Scale
Tomás Wierzbicki
Network Egress Controls for Agent Sandboxes
Deshawn Okafor
Filesystem Isolation Strategies for Cloud Coding Agent Sandboxes
Runtime-generated code demands isolation layers that container security alone cannot provide.
Deshawn Okafor
Promoting Agent Configs Across Environments With Environment Variables
Deshawn Okafor
Linting and Static Analysis for Agent YAML Files
Mei-Ling Sørensen
Model Routing Rules Inside Agent YAML Configurations
Tomás Wierzbicki