Related reading
AI Security Is an Engineering Problem — How to Solve It at Every Layer of the Agent Stack
Nvidia frames AI security as an engineering discipline, outlining required controls across the AI agent stack (model, harness, runtime) and advocating for enforceable boundaries, traceable identities, and evidence‑based testing. It highlights OpenShell as a sandboxed runtime, the Open Secure AI Alliance, and several vendor tools for testing and red‑team exercises.
Nvidianvidia.com4 minSecuring AI Agent Tool Execution with TypeScript AST Sandboxes
The article shows how to protect AI‑generated shell/SQL commands by parsing them with real AST parsers (tree‑sitter for Bash, Babel for JS‑embedded SQL) and enforcing structural allowlists plus command/path whitelists, instead of fragile regex filters.
SitePointsitepoint.com21 minAI Skills with Matt Pocock
Matt Pocock explains how he uses AI agents for software development, emphasizing "strategic programming" and guiding agents with "leading words" from classic engineering texts. He argues that this approach makes engineering fundamentals more critical than ever for creating agent-optimized codebases.
The Pragmatic Engineerpragmaticengineer.com7 minPresentation: The Agent Harness: Control Planes, Invariants, and Approval Boundaries for Production AI Agents
Production AI agents often fail silently due to issues beyond model hallucination, such as state inconsistencies. This talk outlines principles for building reliable agent harnesses, focusing on explicit state ownership, ordered mutations, and verifiable actions, using real-world case studies.
InfoQinfoq.com24 mintalkOpenClaw Is a Preview of Why Governance Matters More Than Ever
Autonomous AI agents like OpenClaw are shifting software development from AI-assisted to AI-executed, capable of committing code and orchestrating deployments without human approval. This necessitates robust governance to manage increased risks in security, compliance, and accountability, as traditional DevOps assumptions no longer hold.
Codeshipcloudbees.com6 min
