willamhou

5 ms·

1. 1.▲
   by willamhou 5mo ago

   Nice use of Rust for the sandbox layer. One thing that helped in our multi-agent experiments was giving each agent its own key and having every tool call carry a signed receipt. That makes debugging a lot easier because you can at least ans
2. 2.▲
   by willamhou 5mo ago

   Gateways and signatures solve different problems. A gateway controls access; a signature lets the server verify what request was actually sent. That matters for replay, tamper, and forgery cases after the request passes the edge. We've
3. 3.▲
   by willamhou 5mo ago

   Had a very similar issue porting a hypervisor to ARM S-EL2. Writes would succeed, there were no faults, and everything looked reasonable in GDB, but the other side never saw the data. The root cause was that Secure and Non-Secure physical a
4. 4.▲
   by willamhou 5mo ago

   One thing I keep thinking about with AI security is that most of the focus is on model behavior — alignment, jailbreaks, guardrails. But once agents start calling tools, the attack surface shifts to the execution boundary. A request can