Blog

Agent security, in depth

Education and field notes on AI-agent security, capability-based policy, MCP enforcement, and the engineering behind eunox.

From Observation to Policy: Drafting a Manifest From What Your Agent Actually Did

The proxy is the easy part — the blank page where you write the first policy is the real adoption cliff. eunox-mcp suggest reads the wiretap tape and drafts a manifest grounded in observed usage, with allowedValues conditions built from the argument values the agent actually used.

Read →

The prompt injection problem: why every AI agent needs a policy layer

Why fixing prompt injection inside the model doesn’t work, and why the only reliable defense is a policy layer at the structured tool call.

Read →