Patterns, scenes, and what we learned shipping agents in regulated environments.
Don't give an AI agent a long-lived key. Use short-lived tokens issued at runtime for one tool. Ten client calls in 2026 showed the four-rung path.
Agent risk is a chain of approved actions nobody scoped together. Every step passes its check. The sequence is the attack.
One short note when we publish. No marketing list. No drip campaign.
