DEV Community

Satisfied Is Not Established Series' Articles

Back to Michael "Mike" K. Saleme's Series
Authenticated, Authorized, and Still Unsafe: The Missing Layer in Agent Security
mspro3210 profile

Authenticated, Authorized, and Still Unsafe: The Missing Layer in Agent Security

#agents #ai #llm #security
Comments
5 min read
We audited every claim in our repos and found 14 files with wrong numbers
mspro3210 profile

We audited every claim in our repos and found 14 files with wrong numbers

#security #python #opensource #testing
Comments
3 min read
The Agentic Maturity Model Is Missing an Axis: Who Validated the Claim
mspro3210 profile

The Agentic Maturity Model Is Missing an Axis: Who Validated the Claim

#security #ai #agents #governance
Comments
3 min read
Every agent passport layer is grading its own exam
mspro3210 profile

Every agent passport layer is grading its own exam

#ai #security #agents #architecture
3
Comments 4
4 min read
Agent payment standards are standardizing the cap, not the binding
mspro3210 profile

Agent payment standards are standardizing the cap, not the binding

#ai #security #agents #payments
Comments 17
2 min read
An AI agent leaked private repos without ever breaking a single permission
mspro3210 profile

An AI agent leaked private repos without ever breaking a single permission

#aiagents #security #llm #promptinjection
Comments
3 min read
The receipt cannot be written by the pen it is checking: separation of duties for agent payments
mspro3210 profile

The receipt cannot be written by the pen it is checking: separation of duties for agent payments

#security #ai #fintech #agents
Comments
2 min read
The spend cap worked. The risk budget didn't compose.
mspro3210 profile

The spend cap worked. The risk budget didn't compose.

#aiagents #security #payments #aws
Comments
4 min read
Every action was authorized. The sequence still crossed the line.
Cover image for Every action was authorized. The sequence still crossed the line.
mspro3210 profile

Every action was authorized. The sequence still crossed the line.

#ai #security #python #opensource
Comments
3 min read
A Signed Agent Receipt Can Still Make an Unsupported Claim
mspro3210 profile

A Signed Agent Receipt Can Still Make an Unsupported Claim

#ai #security #architecture #cryptography
Comments
2 min read
A signature proves who signed the receipt. It does not prove the receipt is true. Here is how you test the difference.
mspro3210 profile

A signature proves who signed the receipt. It does not prove the receipt is true. Here is how you test the difference.

#ai #security #agents
Comments
2 min read
The Evaluation Had a Sandbox. It Needed an Authority Boundary.
mspro3210 profile

The Evaluation Had a Sandbox. It Needed an Authority Boundary.

#security #ai #agents #architecture
Comments
5 min read
Every API Call Was Allowed. The Agent's Outcome Wasn't.
mspro3210 profile

Every API Call Was Allowed. The Agent's Outcome Wasn't.

#ai #architecture #security #api
Comments
3 min read
curl Just Merged RFC 9421 Support. A Valid Signature Still Isn't Authorization.
mspro3210 profile

curl Just Merged RFC 9421 Support. A Valid Signature Still Isn't Authorization.

#ai #security #api #governance
Comments
5 min read
MCP Went Stateless. My Test Suite Stayed Green Anyway.
mspro3210 profile

MCP Went Stateless. My Test Suite Stayed Green Anyway.

#security #ai #mcp #testing
Comments
5 min read
I Tested My Own Method Four Times. Its Strongest Claim Never Passed.
mspro3210 profile

I Tested My Own Method Four Times. Its Strongest Claim Never Passed.

#ai #architecture #agents #llm
1
Comments 8
6 min read
Can your security test suite fail? Mine passed against nothing.
mspro3210 profile

Can your security test suite fail? Mine passed against nothing.

#security #testing #ai #agents
Comments
5 min read
My Quorum Test Never Had an Approver in It
mspro3210 profile

My Quorum Test Never Had an Approver in It

#security #testing #ai #agents
1
Comments
5 min read
Satisfied Is Not Established
mspro3210 profile

Satisfied Is Not Established

#security #testing #ai #agents
Comments
4 min read