Blog
Design notes and how-tos on deploying AI agents with a permission manifest, sealed secrets and an audit trail. Every post is also Markdown: add .md to its URL.
Telling a model "never call external APIs" is a request. A manifest the runtime enforces is a guarantee. What changes when permission is syntax, and why security teams say yes to one and no to the other.
A walkthrough of the invoice-agent recipe: how the manifest, the spend ledger, the sealed signing key and the approval step fit together, and what the audit log looks like after the first payment.
Most agent secret leaks are not clever. The model was asked for the key and it had the key. Sealed secrets remove the second half of that sentence, and change what a security review has to check.