Security for AI Agents and Automation
Agent identity and access
Agent Identity and Access
- A Presenter Identity for the Caller
- Choosing an Identity Provider for a Small Team Using AI Agents
- Contractor Scopes That Expire on Their Own
- How to Offboard a Contractor Who Had Agent Access
- Naming and Tagging Service Accounts So You Can Find Their Owner
- Propagating the Caller's Identity Through Agent Chains
- Separating the Agent's Credentials From the Caller's Identity
- Testing an Agent Fails Closed Without Its Group Claim
- All of Agent identity and access
Tool contracts and schemas
Tool Contracts and Schemas
- A Test Harness for Tool Selection Accuracy
- Collecting No-Tool Examples From Tickets and Call Transcripts
- Contract Tests for the Tools Your Agent Calls
- Parameterized Tools: Binding Agent Arguments to Types and Enums
- Splitting One Broad Agent Tool Into Narrow Tools
- Structured Error Schemas Across Providers
- When a Model Upgrade Forces a Tool Re-eval: A Checklist
- When a Repair Changes the Meaning: Validating Corrected Arguments
- All of Tool contracts and schemas
Agent memory and data
Agent Memory and Data
- Auditing and Cleaning Agent Memory
- When Agents Run Out of Context: Memory Stores and Failure Modes
- When an Agent Opens an Email: Parsing and Trust Boundaries
- When an Agent Reads Its Own Memory: Preventing Feedback Loops
- A Backup and Restore Plan for Your Agent's Memory Store
- A Dashboard for Memory Hygiene: Metrics That Show Poison
- A Memory Write Gate That Reads the Source, Not the Summary
- A Write Path Policy for Agent Memory: Sources and Trust Tiers
- All of Agent memory and data
Multi-agent systems
Multi-Agent Systems
- A Security Review Template for Multi-Agent Systems
- Testing Failure Propagation in a Chain of Agents
- A Review Checklist for Agent-to-Agent Tool Calls
- Logging and Tracing Agent-to-Agent Calls for Incident Review
- Setting Trust Boundaries for Multi-Agent Workflows
- When an Agent Calls Another Agent: Message Schemas That Hold
Agent actions and approvals
Agent Actions and Approvals
- A Policy File for Routing Agent Actions by Risk Tier
- Approval Gates for Agents: Which Actions Need a Human
- How to Write the Approval Request a Human Can Actually Decide On
- One Approval Box for Two Actions: When a Batch Is Too Big to Send
- Routing Agent Actions by Risk Tier With a Policy File
- Turning a Risk Tier Into an Approval Timeout
- When an Agent Action Is Not in the Policy File
- Which Repairs Need a Human: A Policy for Meaning Changes
- All of Agent actions and approvals
Agent reliability and fallbacks
Agent Reliability and Fallbacks
- A Circuit Breaker the Agent Can Read: What the Model Sees at Trip
- Detecting Agent Loops Before They Burn Budget
- When a Downstream Agent Returns Confident Garbage
- A Budget and a Kill Switch for a Chain That Keeps Retrying
- A Cost Table for Redundant Access Paths
- A Latency Budget for Tool Calls: Timeouts and Retries per Hop
- A Rollback Plan You Can Execute on a Sunday
- How to Write a Postmortem for an AI Agent Incident
- All of Agent reliability and fallbacks