Security

2 posts

19 May 20264 min read

Sandboxing code an agent wrote for you

Once an agent writes and runs code, you are executing untrusted input on your infrastructure. The isolation question has known answers. The harder problems are quotas, cancellation and getting results out.

Agents
Security
Architecture

4 Dec 20254 min read

Signing webhooks, and the SSRF hole nobody patches

Most webhook guides stop at HMAC signatures. The bigger risk is on your side: a customer-supplied delivery URL turns your sender into a proxy for your own private network. Here is the full path.

Security
Architecture