Patterns, scenes, and what we learned shipping agents in regulated environments.
Don't give an AI agent a long-lived key. Use short-lived tokens issued at runtime for one tool. Ten client calls in 2026 showed the four-rung path.
Every AI tool connected to your email or files left an OAuth consent grant in your identity provider. Here's how to pull that list this week, for free.
A practical guide to securing AI agents. What good governance looks like and how to start this quarter. Free.
One short note when we publish. No marketing list. No drip campaign.
