<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>DEV Community: Crucible Security</title>
    <description>The latest articles on DEV Community by Crucible Security (@crucible_sec).</description>
    <link>https://dev.to/crucible_sec</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3896532%2F726f5f02-203b-4772-973d-aa3935419ab7.jpg</url>
      <title>DEV Community: Crucible Security</title>
      <link>https://dev.to/crucible_sec</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://dev.to/feed/crucible_sec"/>
    <language>en</language>
    <item>
      <title>AI Actions Matter More Than AI Answers</title>
      <dc:creator>Crucible Security</dc:creator>
      <pubDate>Fri, 07 Aug 2026 02:00:47 +0000</pubDate>
      <link>https://dev.to/crucible_sec/ai-actions-matter-more-than-ai-answers-238j</link>
      <guid>https://dev.to/crucible_sec/ai-actions-matter-more-than-ai-answers-238j</guid>
      <description>&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Folczgo6hukblembdbr2h.png" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Folczgo6hukblembdbr2h.png" alt=" " width="800" height="1200"&gt;&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;Large language models are often judged by their responses.&lt;/p&gt;

&lt;p&gt;AI agents should also be judged by their actions.&lt;/p&gt;

&lt;p&gt;What tool did they choose?&lt;/p&gt;

&lt;p&gt;Did they access the correct data?&lt;/p&gt;

&lt;p&gt;Did they follow policy?&lt;/p&gt;

&lt;p&gt;Did they modify memory appropriately?&lt;/p&gt;

&lt;p&gt;Did they stop when they should have?&lt;/p&gt;

&lt;p&gt;As AI systems gain autonomy, evaluating actions becomes just as important as evaluating language.&lt;/p&gt;

&lt;p&gt;Engineering teams need visibility into both.&lt;/p&gt;

&lt;p&gt;Because users don’t experience probabilities.&lt;/p&gt;

&lt;p&gt;They experience outcomes.&lt;/p&gt;

&lt;p&gt;That’s why we’re building Crucible.&lt;/p&gt;

&lt;p&gt;Helping teams validate AI actions before they become production incidents.&lt;/p&gt;

&lt;p&gt;Pytest for AI Agents.&lt;/p&gt;

&lt;h1&gt;
  
  
  OpenSource #CyberSecurity #Python #AIAgents #BuildInPublic
&lt;/h1&gt;

</description>
      <category>ai</category>
      <category>buildinpublic</category>
      <category>cybersecurity</category>
      <category>opensource</category>
    </item>
    <item>
      <title>Verification Is the Foundation of Trust</title>
      <dc:creator>Crucible Security</dc:creator>
      <pubDate>Tue, 04 Aug 2026 18:53:02 +0000</pubDate>
      <link>https://dev.to/crucible_sec/verification-is-the-foundation-of-trust-1jkf</link>
      <guid>https://dev.to/crucible_sec/verification-is-the-foundation-of-trust-1jkf</guid>
      <description>&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F65xwu4qehhlz6rg3ad3y.png" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F65xwu4qehhlz6rg3ad3y.png" alt=" " width="800" height="1200"&gt;&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;AI systems are becoming more capable every month.&lt;/p&gt;

&lt;p&gt;But capability alone isn't enough.&lt;/p&gt;

&lt;p&gt;Engineering requires evidence.&lt;/p&gt;

&lt;p&gt;Can we verify this behavior?&lt;/p&gt;

&lt;p&gt;Can we reproduce the result?&lt;/p&gt;

&lt;p&gt;Can we confirm policy adherence?&lt;/p&gt;

&lt;p&gt;Can we detect regressions after updates?&lt;/p&gt;

&lt;p&gt;These questions matter because AI isn't just generating text anymore.&lt;/p&gt;

&lt;p&gt;It's making decisions.&lt;/p&gt;

&lt;p&gt;Using tools.&lt;/p&gt;

&lt;p&gt;Remembering context.&lt;/p&gt;

&lt;p&gt;Acting on behalf of users.&lt;/p&gt;

&lt;p&gt;The more responsibility AI gains, the more important verification becomes.&lt;/p&gt;

&lt;p&gt;Trust shouldn't be assumed.&lt;/p&gt;

&lt;p&gt;It should be earned through continuous validation.&lt;/p&gt;

&lt;p&gt;That's why we're building Crucible.&lt;/p&gt;

&lt;p&gt;Helping teams verify AI behavior with the rigor of modern software engineering.&lt;/p&gt;

&lt;p&gt;Pytest for AI Agents.&lt;/p&gt;

&lt;h1&gt;
  
  
  OpenSource #CyberSecurity #Python #AIAgents #BuildInPublic
&lt;/h1&gt;

</description>
      <category>ai</category>
      <category>cybersecurity</category>
      <category>buildinpublic</category>
      <category>opensource</category>
    </item>
    <item>
      <title>AI Engineering Is Becoming Behavior Engineering</title>
      <dc:creator>Crucible Security</dc:creator>
      <pubDate>Fri, 31 Jul 2026 13:12:22 +0000</pubDate>
      <link>https://dev.to/crucible_sec/ai-engineering-is-becoming-behavior-engineering-2gan</link>
      <guid>https://dev.to/crucible_sec/ai-engineering-is-becoming-behavior-engineering-2gan</guid>
      <description>&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F0pp48gbp1h7zcldo79lt.png" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F0pp48gbp1h7zcldo79lt.png" alt=" " width="800" height="1200"&gt;&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;Traditional software engineering answers questions like:&lt;/p&gt;

&lt;p&gt;Does the code compile?&lt;br&gt;
Does the API return the correct response?&lt;br&gt;
Do the tests pass?&lt;br&gt;
AI engineering asks different questions.&lt;/p&gt;

&lt;p&gt;Does the agent stay within policy?&lt;br&gt;
Does it use tools responsibly?&lt;br&gt;
Does memory influence behavior correctly?&lt;br&gt;
Does it recover from ambiguity?&lt;br&gt;
Does it remain trustworthy after updates?&lt;br&gt;
Those aren’t code problems.&lt;/p&gt;

&lt;p&gt;They’re behavior problems.&lt;/p&gt;

&lt;p&gt;As AI agents become part of everyday products, engineering will increasingly focus on designing, testing, and validating behavior—not just implementation.&lt;/p&gt;

&lt;p&gt;That’s why we’re building Crucible.&lt;/p&gt;

&lt;p&gt;Helping teams engineer AI behavior with measurable confidence.&lt;/p&gt;

&lt;p&gt;Pytest for AI Agents.&lt;/p&gt;

&lt;h1&gt;
  
  
  OpenSource #CyberSecurity #Python #AIAgents #BuildInPublic
&lt;/h1&gt;

</description>
      <category>ai</category>
      <category>cybersecurity</category>
      <category>buildinpublic</category>
      <category>opensource</category>
    </item>
    <item>
      <title>AI Testing Is Really About Confidence</title>
      <dc:creator>Crucible Security</dc:creator>
      <pubDate>Fri, 24 Jul 2026 17:10:40 +0000</pubDate>
      <link>https://dev.to/crucible_sec/ai-testing-is-really-about-confidence-476i</link>
      <guid>https://dev.to/crucible_sec/ai-testing-is-really-about-confidence-476i</guid>
      <description>&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F6wldc3ianxmlvjuxr5sb.png" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F6wldc3ianxmlvjuxr5sb.png" alt=" " width="800" height="1200"&gt;&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;People often describe AI testing as a security problem.&lt;/p&gt;

&lt;p&gt;It's bigger than that.&lt;/p&gt;

&lt;p&gt;Engineering teams test because uncertainty is expensive.&lt;/p&gt;

&lt;p&gt;Every unanswered question slows deployment.&lt;/p&gt;

&lt;p&gt;Every unknown behavior increases operational risk.&lt;/p&gt;

&lt;p&gt;Every regression reduces trust.&lt;/p&gt;

&lt;p&gt;Good testing doesn't promise perfection.&lt;/p&gt;

&lt;p&gt;It provides evidence.&lt;/p&gt;

&lt;p&gt;Evidence that behavior remains consistent.&lt;/p&gt;

&lt;p&gt;Evidence that policies still hold.&lt;/p&gt;

&lt;p&gt;Evidence that updates haven't introduced unexpected changes.&lt;/p&gt;

&lt;p&gt;That's what gives teams confidence to move faster—not slower.&lt;/p&gt;

&lt;p&gt;That's why we're building Crucible.&lt;/p&gt;

&lt;p&gt;Helping engineering teams transform uncertainty into measurable confidence.&lt;/p&gt;

&lt;p&gt;Pytest for AI Agents.&lt;/p&gt;

&lt;h1&gt;
  
  
  OpenSource #CyberSecurity #Python #AIAgents #BuildInPublic
&lt;/h1&gt;

</description>
    </item>
    <item>
      <title>Trust Is an Engineering Outcome</title>
      <dc:creator>Crucible Security</dc:creator>
      <pubDate>Thu, 23 Jul 2026 15:57:36 +0000</pubDate>
      <link>https://dev.to/crucible_sec/trust-is-an-engineering-outcome-4d9f</link>
      <guid>https://dev.to/crucible_sec/trust-is-an-engineering-outcome-4d9f</guid>
      <description>&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Fgvmsehwjc7zazgxizlvg.png" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Fgvmsehwjc7zazgxizlvg.png" alt=" " width="800" height="1200"&gt;&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;AI discussions often revolve around intelligence.&lt;/p&gt;

&lt;p&gt;But production systems are judged by trust.&lt;/p&gt;

&lt;p&gt;Can users rely on them?&lt;/p&gt;

&lt;p&gt;Will they behave consistently?&lt;/p&gt;

&lt;p&gt;Will they stay within policy?&lt;/p&gt;

&lt;p&gt;Will updates introduce regressions?&lt;/p&gt;

&lt;p&gt;These questions aren’t answered by benchmark scores.&lt;/p&gt;

&lt;p&gt;They’re answered through engineering discipline.&lt;/p&gt;

&lt;p&gt;Trust is the result of many successful validations over time.&lt;/p&gt;

&lt;p&gt;Not one impressive demo.&lt;/p&gt;

&lt;p&gt;As AI becomes critical infrastructure, trust will increasingly become something teams engineer—not something they assume.&lt;/p&gt;

&lt;p&gt;That’s why we’re building Crucible.&lt;/p&gt;

&lt;p&gt;Helping engineering teams transform trust from an abstract goal into a measurable engineering outcome.&lt;/p&gt;

&lt;p&gt;Pytest for AI Agents.&lt;/p&gt;

&lt;h1&gt;
  
  
  OpenSource #CyberSecurity #Python #AIAgents #BuildInPublic
&lt;/h1&gt;

</description>
      <category>ai</category>
      <category>cybersecurity</category>
      <category>opensource</category>
      <category>buildinpublic</category>
    </item>
    <item>
      <title>Every AI Tool Is Part of Your Security Boundary</title>
      <dc:creator>Crucible Security</dc:creator>
      <pubDate>Thu, 23 Jul 2026 15:54:57 +0000</pubDate>
      <link>https://dev.to/crucible_sec/every-ai-tool-is-part-of-your-security-boundary-561e</link>
      <guid>https://dev.to/crucible_sec/every-ai-tool-is-part-of-your-security-boundary-561e</guid>
      <description>&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F1lbp4nbkimbhyd7mel0b.png" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F1lbp4nbkimbhyd7mel0b.png" alt=" " width="800" height="1200"&gt;&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;AI agents are no longer isolated chatbots.&lt;/p&gt;

&lt;p&gt;They’re connected systems.&lt;/p&gt;

&lt;p&gt;They can search the web.&lt;/p&gt;

&lt;p&gt;Read documents.&lt;/p&gt;

&lt;p&gt;Execute workflows.&lt;/p&gt;

&lt;p&gt;Interact with internal services.&lt;/p&gt;

&lt;p&gt;That changes the nature of AI security.&lt;/p&gt;

&lt;p&gt;The question is no longer only whether the model responds correctly.&lt;/p&gt;

&lt;p&gt;It’s whether the agent interacts with external systems responsibly.&lt;/p&gt;

&lt;p&gt;Every tool call becomes a security decision.&lt;/p&gt;

&lt;p&gt;Every permission becomes a trust boundary.&lt;/p&gt;

&lt;p&gt;Every integration deserves validation.&lt;/p&gt;

&lt;p&gt;That’s why modern AI security must extend beyond prompts to include tools, workflows, and real-world actions.&lt;/p&gt;

&lt;p&gt;That’s why we’re building Crucible.&lt;/p&gt;

&lt;p&gt;Helping engineering teams validate AI behavior across every connected capability.&lt;/p&gt;

&lt;p&gt;Pytest for AI Agents.&lt;/p&gt;

&lt;h1&gt;
  
  
  OpenSource #CyberSecurity #Python #AIAgents #BuildInPublic
&lt;/h1&gt;

</description>
      <category>ai</category>
      <category>cybersecurity</category>
      <category>opensource</category>
      <category>buildinpublic</category>
    </item>
    <item>
      <title>AI Failures Are Chains, Not Moments</title>
      <dc:creator>Crucible Security</dc:creator>
      <pubDate>Thu, 23 Jul 2026 15:51:31 +0000</pubDate>
      <link>https://dev.to/crucible_sec/ai-failures-are-chains-not-moments-517m</link>
      <guid>https://dev.to/crucible_sec/ai-failures-are-chains-not-moments-517m</guid>
      <description>&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Fjspeg3qn4n8y34uhv27f.png" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Fjspeg3qn4n8y34uhv27f.png" alt=" " width="800" height="1200"&gt;&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;When people imagine AI failures, they often picture one malicious prompt.&lt;/p&gt;

&lt;p&gt;Reality is usually more complex.&lt;/p&gt;

&lt;p&gt;A conversation evolves.&lt;/p&gt;

&lt;p&gt;Memory changes.&lt;/p&gt;

&lt;p&gt;Tools are called.&lt;/p&gt;

&lt;p&gt;Policies are interpreted.&lt;/p&gt;

&lt;p&gt;Each decision influences the next.&lt;/p&gt;

&lt;p&gt;Eventually, the accumulated chain produces an unsafe outcome.&lt;/p&gt;

&lt;p&gt;That’s why modern AI validation must move beyond isolated prompt testing.&lt;/p&gt;

&lt;p&gt;Teams need to understand how behavior evolves across an entire workflow.&lt;/p&gt;

&lt;p&gt;Because users don’t experience isolated responses.&lt;/p&gt;

&lt;p&gt;They experience decision chains.&lt;/p&gt;

&lt;p&gt;That’s why we’re building Crucible.&lt;/p&gt;

&lt;p&gt;Helping engineering teams validate AI systems across complete interaction lifecycles.&lt;/p&gt;

&lt;p&gt;Pytest for AI Agents.&lt;/p&gt;

&lt;h1&gt;
  
  
  OpenSource #CyberSecurity #Python #AIAgents #BuildInPublic
&lt;/h1&gt;

</description>
      <category>ai</category>
      <category>cybersecurity</category>
      <category>opensource</category>
      <category>buildinpublic</category>
    </item>
    <item>
      <title>Production AI Lives Beyond the First Prompt</title>
      <dc:creator>Crucible Security</dc:creator>
      <pubDate>Thu, 16 Jul 2026 11:57:21 +0000</pubDate>
      <link>https://dev.to/crucible_sec/production-ai-lives-beyond-the-first-prompt-5fc2</link>
      <guid>https://dev.to/crucible_sec/production-ai-lives-beyond-the-first-prompt-5fc2</guid>
      <description>&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F52h1f8h4sdsypb8lmjch.png" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F52h1f8h4sdsypb8lmjch.png" alt=" " width="800" height="1200"&gt;&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;It's easy to build an impressive demo.&lt;/p&gt;

&lt;p&gt;Ask one carefully crafted question.&lt;/p&gt;

&lt;p&gt;Get one impressive answer.&lt;/p&gt;

&lt;p&gt;Celebrate.&lt;/p&gt;

&lt;p&gt;But production AI doesn't operate like demos.&lt;/p&gt;

&lt;p&gt;Users have conversations.&lt;/p&gt;

&lt;p&gt;They change context.&lt;/p&gt;

&lt;p&gt;They revisit earlier topics.&lt;/p&gt;

&lt;p&gt;They trigger edge cases.&lt;/p&gt;

&lt;p&gt;They ask the unexpected.&lt;/p&gt;

&lt;p&gt;That's where reliability is measured.&lt;/p&gt;

&lt;p&gt;Not by the first response—but by the consistency of the fiftieth.&lt;/p&gt;

&lt;p&gt;As AI agents become more autonomous, testing needs to reflect real usage.&lt;/p&gt;

&lt;p&gt;That means evaluating memory, context retention, behavioral consistency, and long-running conversations.&lt;/p&gt;

&lt;p&gt;That's why we're building Crucible.&lt;/p&gt;

&lt;p&gt;Helping engineering teams validate AI behavior across the entire conversation—not just the first message.&lt;/p&gt;

&lt;p&gt;Pytest for AI Agents.&lt;/p&gt;

&lt;h1&gt;
  
  
  OpenSource #CyberSecurity #Python #AIAgents #BuildInPublic
&lt;/h1&gt;

</description>
      <category>ai</category>
      <category>opensource</category>
      <category>buildinpublic</category>
      <category>cybersecurity</category>
    </item>
    <item>
      <title>Deterministic Testing for Non-Deterministic AI</title>
      <dc:creator>Crucible Security</dc:creator>
      <pubDate>Thu, 16 Jul 2026 11:43:35 +0000</pubDate>
      <link>https://dev.to/crucible_sec/deterministic-testing-for-non-deterministic-ai-118h</link>
      <guid>https://dev.to/crucible_sec/deterministic-testing-for-non-deterministic-ai-118h</guid>
      <description>&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Fkh51mpc7k55x3keufptx.png" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Fkh51mpc7k55x3keufptx.png" alt=" " width="800" height="1200"&gt;&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;AI systems don't behave like traditional software.&lt;/p&gt;

&lt;p&gt;Two identical requests can produce different responses.&lt;/p&gt;

&lt;p&gt;That flexibility is often a strength.&lt;/p&gt;

&lt;p&gt;But it also creates a challenge.&lt;/p&gt;

&lt;p&gt;Engineering teams still need confidence.&lt;/p&gt;

&lt;p&gt;Confidence that policy holds.&lt;/p&gt;

&lt;p&gt;Confidence that tool usage remains safe.&lt;/p&gt;

&lt;p&gt;Confidence that updates haven't introduced regressions.&lt;/p&gt;

&lt;p&gt;That means testing must focus on behavioral expectations rather than identical outputs.&lt;/p&gt;

&lt;p&gt;The goal isn't forcing AI to be deterministic.&lt;/p&gt;

&lt;p&gt;It's making validation deterministic.&lt;/p&gt;

&lt;p&gt;That's why we're building Crucible.&lt;/p&gt;

&lt;p&gt;Helping teams continuously verify AI behavior through repeatable engineering workflows.&lt;/p&gt;

&lt;p&gt;Pytest for AI Agents.&lt;/p&gt;

&lt;h1&gt;
  
  
  OpenSource #CyberSecurity #Python #AIAgents #BuildInPublic
&lt;/h1&gt;

</description>
      <category>ai</category>
      <category>cybersecurity</category>
      <category>buildinpublic</category>
      <category>opensource</category>
    </item>
    <item>
      <title>AI Security Is a Moving Target</title>
      <dc:creator>Crucible Security</dc:creator>
      <pubDate>Sun, 12 Jul 2026 15:59:44 +0000</pubDate>
      <link>https://dev.to/crucible_sec/ai-security-is-a-moving-target-n9c</link>
      <guid>https://dev.to/crucible_sec/ai-security-is-a-moving-target-n9c</guid>
      <description>&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Fi4eeo3ibip08pv9s4zll.png" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Fi4eeo3ibip08pv9s4zll.png" alt=" " width="800" height="1200"&gt;&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;One of the biggest misconceptions in AI engineering is believing that passing a security evaluation once is enough.&lt;/p&gt;

&lt;p&gt;It isn't.&lt;/p&gt;

&lt;p&gt;AI systems evolve.&lt;/p&gt;

&lt;p&gt;Models are updated.&lt;/p&gt;

&lt;p&gt;Prompts change.&lt;/p&gt;

&lt;p&gt;Knowledge bases grow.&lt;/p&gt;

&lt;p&gt;Tools are added.&lt;/p&gt;

&lt;p&gt;Every change can influence behavior.&lt;/p&gt;

&lt;p&gt;That's behavioral drift.&lt;/p&gt;

&lt;p&gt;The challenge isn't simply detecting vulnerabilities.&lt;/p&gt;

&lt;p&gt;It's detecting when previously safe behavior gradually becomes unsafe.&lt;/p&gt;

&lt;p&gt;Continuous behavioral validation helps engineering teams identify those shifts before users experience them.&lt;/p&gt;

&lt;p&gt;Because in AI, yesterday's passing test doesn't guarantee tomorrow's reliability.&lt;/p&gt;

&lt;p&gt;That's why we're building Crucible.&lt;/p&gt;

&lt;p&gt;Helping teams continuously measure and validate AI behavior over time.&lt;/p&gt;

&lt;p&gt;Pytest for AI Agents.&lt;/p&gt;

&lt;h1&gt;
  
  
  OpenSource #CyberSecurity #Python #AIAgents #BuildInPublic
&lt;/h1&gt;

</description>
      <category>ai</category>
      <category>cybersecurity</category>
      <category>opensource</category>
      <category>buildinpublic</category>
    </item>
    <item>
      <title>AI Isn't Just Code. It's Behavior.</title>
      <dc:creator>Crucible Security</dc:creator>
      <pubDate>Sun, 12 Jul 2026 15:56:17 +0000</pubDate>
      <link>https://dev.to/crucible_sec/ai-isnt-just-code-its-behavior-1dni</link>
      <guid>https://dev.to/crucible_sec/ai-isnt-just-code-its-behavior-1dni</guid>
      <description>&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F39c28vt872fidfycc2n0.png" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F39c28vt872fidfycc2n0.png" alt=" " width="800" height="1200"&gt;&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;For decades, software engineering has focused on code correctness.&lt;/p&gt;

&lt;p&gt;Functions.&lt;/p&gt;

&lt;p&gt;APIs.&lt;/p&gt;

&lt;p&gt;Integrations.&lt;/p&gt;

&lt;p&gt;Infrastructure.&lt;/p&gt;

&lt;p&gt;AI agents add another layer.&lt;/p&gt;

&lt;p&gt;Behavior.&lt;/p&gt;

&lt;p&gt;Two identical systems can behave differently depending on context, memory, tools, and user interaction.&lt;/p&gt;

&lt;p&gt;That means traditional testing alone is no longer enough.&lt;/p&gt;

&lt;p&gt;Teams need to evaluate:&lt;/p&gt;

&lt;p&gt;Does the agent stay within policy?&lt;br&gt;
Does it use tools responsibly?&lt;br&gt;
Does it recover from ambiguity?&lt;br&gt;
Does it remain consistent across conversations?&lt;br&gt;
Does behavior change after deployment?&lt;/p&gt;

&lt;p&gt;These aren't code questions.&lt;/p&gt;

&lt;p&gt;They're behavior questions.&lt;/p&gt;

&lt;p&gt;And that's why behavioral validation is becoming a core engineering discipline.&lt;/p&gt;

&lt;p&gt;That's why we're building Crucible.&lt;/p&gt;

&lt;p&gt;Pytest for AI Agents.&lt;/p&gt;

&lt;h1&gt;
  
  
  OpenSource #CyberSecurity #Python #AIAgents #BuildInPublic
&lt;/h1&gt;

</description>
      <category>ai</category>
      <category>buildinpublic</category>
      <category>opensource</category>
      <category>cybersecurity</category>
    </item>
    <item>
      <title>The Most Dangerous AI Bug Looks Correct</title>
      <dc:creator>Crucible Security</dc:creator>
      <pubDate>Sun, 12 Jul 2026 15:52:57 +0000</pubDate>
      <link>https://dev.to/crucible_sec/the-most-dangerous-ai-bug-looks-correct-4817</link>
      <guid>https://dev.to/crucible_sec/the-most-dangerous-ai-bug-looks-correct-4817</guid>
      <description>&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F82uposap73jsb46k5h9n.png" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F82uposap73jsb46k5h9n.png" alt=" " width="800" height="1200"&gt;&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;Software crashes are frustrating.&lt;/p&gt;

&lt;p&gt;But they're visible.&lt;/p&gt;

&lt;p&gt;AI introduces another category of failure.&lt;/p&gt;

&lt;p&gt;The system responds confidently.&lt;/p&gt;

&lt;p&gt;The answer appears reasonable.&lt;/p&gt;

&lt;p&gt;Nothing seems wrong.&lt;/p&gt;

&lt;p&gt;Until someone verifies it.&lt;/p&gt;

&lt;p&gt;These silent failures can be more damaging because they create confidence where caution is needed.&lt;/p&gt;

&lt;p&gt;That's why AI evaluation can't stop at checking whether the system produced an output.&lt;/p&gt;

&lt;p&gt;It also needs to ask:&lt;/p&gt;

&lt;p&gt;Was the reasoning appropriate?&lt;br&gt;
Was the behavior within policy?&lt;br&gt;
Was the output reliable?&lt;br&gt;
Would we trust this in production?&lt;/p&gt;

&lt;p&gt;Behavioral validation helps teams answer those questions before users have to.&lt;/p&gt;

&lt;p&gt;That's why we're building Crucible.&lt;/p&gt;

&lt;p&gt;Helping teams detect the failures that don't announce themselves.&lt;/p&gt;

&lt;p&gt;Pytest for AI Agents.&lt;/p&gt;

&lt;h1&gt;
  
  
  OpenSource #CyberSecurity #Python #AIAgents #BuildInPublic
&lt;/h1&gt;

</description>
      <category>ai</category>
      <category>buildinpublic</category>
      <category>cybersecurity</category>
      <category>opensource</category>
    </item>
  </channel>
</rss>
