Tag

#Code Security

AI Agents

Sandboxing LLM-Generated Code Without Docker-in-Docker

Running agent-generated code in a plain Docker container trusts a boundary built for reviewed workloads. MicroVMs give you a real kernel per execution at roughly 125ms boot.

August 20, 2026 AI Agents

Temporal Policies for AI Agents: Stateful Authorization in Plain SQL

Per-call RBAC can't say "deny this refund because a cancellation already happened." Sequence-aware authorization for AI agents is two Postgres tables and one plpgsql function.

August 10, 2026 AI Agents

The Pre-Ship Security Checklist for Vibe-Coded PRs

An AI agent resolved an RLS error by making the table publicly readable. CI stayed green. Here's the grep triage and checklist I run before any LLM-generated code ships.

May 22, 2026