Zero-trust AI agents: sign every write and isolate the generated code
A prompt is not a security boundary. To allow an agent to modify a system, each write must be authorized, signed, isolated, and verifiable.
Topic
security
Long-duration agents in sandbox: architecture, security, and task recovery in 2026
An agent who works for hours needs checkpoints, budgets, persistent states, and access limits. The model is only part of the system: the harness and the sandbox determine what it can actually do.
Designing a secure and useful client extranet: architecture, rights, documents, and user experience
An extranet is not a site to which one adds a connection. It becomes a boundary of the information system and must be designed as a business product.
Technical audit of a web application: the complete checklist before takeover, redesign or acquisition
A useful audit does not produce an abstract list of defects. It transforms the real state of an application into understandable risks, quantified priorities and decision scenarios.