mcnamtm1

4 ms·

1. 1.▲
   by mcnamtm1 7mo ago

   "Agents started calling tools nobody remembered wiring up" This is very familiar to me. I have seen this problem before. Because AI is often a network of microservices and follow service mesh patterns, there is an inherent ability
2. 2.▲
   by mcnamtm1 8mo ago

   I started coding in the late 70's (not 1908). I suppose I will take the "older folk" label as a compliment :-) I coded with Fortran and "wrote" software on punch cards that had to be compiled by a machine that read
3. 3.▲
   by mcnamtm1 8mo ago

   We tackled a similar problem for K8s workloads—verifying automated service identity trust without static credentials. A few thoughts on your approach: *Persistent identity + rotation:* The tension between "persistent" (provable h
4. 4.▲
   by mcnamtm1 8mo ago

   Very interesting use of Firecracker for agent isolation. How do you handle network identity for the agents themselves? Are you using something like mTLS/SPIFFE to identify the workload inside the VM, or is it purely network-policy bas
5. 5.▲
   by mcnamtm1 8mo ago

   Good question. To clarify: the app still has its own internal auth logic — we're not bypassing that. The encrypted lane handles connection isolation (who can reach the app), while the app still handles identity (who the user is). For
6. 6.▲
   by mcnamtm1 8mo ago

   We have a real setup that treats this challenge as a network isolation problem instead of an auth problem. Have you considered that approach? Meaning: instead of trying to authenticate to the preview app, make the preview app only reachable
7. 7.▲
   by mcnamtm1 8mo ago

   I think it matters how you define 'end-to-end'. Where are the endpoints? In a SaaS platform, WhatsApp could claim your device and its ingress server are the endpoints. With that definition, they can use TLS and claim E2EE. But som
8. 8.▲
   by mcnamtm1 8mo ago

   I am in Camp A. I verify AI-generated content closely. I am usually using AI to improve content that I have provided. Because I am knowledgeable about the information and topic, I can quickly recognize when AI is wrong or stupid. I find a l
9. 9.▲
   by mcnamtm1 8mo ago

   I think fail-secure is the right strategy for agentic AI, especially if the actions taken are irreversible or control something significant. The generative AI systems make a lot of errors. There is so much risk when human supervision is no