Auditing AI Agent Tool Permissions, Secrets, and Audit Logs Before Production
pr0h0•
ai-agentssecuritygovernanceaudit-logssecrets-management
From a senior to future senior Hackers
Latest Posts
View all posts →
Auditing GitHub Actions for Leaked Secrets: OIDC, Least-Privilege PATs, and Audit-Log Tripwires
pr0h0•
github-actionsoidcsecrets-managementci-cd-securitysupply-chain
Deno Under Cloudflare: Open-Source Governance and Runtime Strategy
pr0h0•
denocloudflarejavascript-runtimesopen-source-governanceedge-computing
Latest Videos
View all videos →
Auditing AI Agent Tool Permissions, Secrets, and Audit Logs Before Production
A practical pre-production audit checklist for AI agents covering tool permissions, secrets handling, data boundaries, audit logs, and automated evaluation, prompted by reports that 88% of firms run agents in production while only 14% actually govern them.
ai-agentssecuritygovernance
Testing Multi-AZ Failover Assumptions After the Yandex Cloud Sasovo Outage
The Sasovo data center drone attack that took down a Yandex Cloud zone is a concrete prompt to re-examine multi-AZ failover assumptions, region isolation, and the physical-layer risks that cloud abstractions tend to hide.
cloud-resiliencedisaster-recoveryyandex-cloud
Deno Under Cloudflare: Open-Source Governance and Runtime Strategy
Cloudflare's acquisition of Deno raises hard questions about open-source governance, vendor control, and how Node.js, Bun, and edge runtimes will compete once Workers can run on self-hosted infrastructure.
denocloudflarejavascript-runtimes