Secure agent ops

A guided series of 3 articles on Secure agent ops.

Trust Boundaries for AI Agents: Securing Automated Workflows — Prompt injection can't be prompted away. This is a practical guide to containing AI agents in automated workflows by drawing trust boundaries: mapping the "lethal trifecta" to your own wiring, scoping tools instead of tokens, and putting deterministic gates on the steps that actually cause conseque
Your real moat after GPT-5.6 and Kimi K3 is a private eval harness — Public benchmarks can narrow the field, but they decay fast and they do not test your permissions, tools, or network policy. The durable advantage is a private eval harness that can replay real tasks and gate rollout by task class.
Your eval harness needs its own threat model — A private eval harness is valuable because it mirrors your real system boundaries. That also means it needs the same kind of security thinking as CI: isolation, provenance, and hard failure on policy violations.