agentic-ai
8 essays on this topic.
- The OAuth Token You Forgot About
Vercel was breached through a third-party AI tool's OAuth token. The lesson is not about Vercel's security — it is about how every AI tool you onboard extends your attack surface in ways your governance framework does not track.
- Observability Is Not Assurance
Most agentic AI governance frameworks treat logging and assurance as the same thing. They're not. One records what happened. The other judges whether it was correct.
- Governing Agents the Way Cells Govern Themselves
Six cell biology mechanisms that reveal what the networking 'control plane' metaphor misses about governing AI agents.
- The Risk Without an Engineering Solution
Every other agentic AI risk has an engineering answer. Prompt injection doesn't. That changes everything about how you design controls.
- Why Agents Break Governance
Four interactions between agentic properties create risks that manual governance cannot address. The category boundary is not AI versus traditional — it is systems that act versus systems that advise.
- Supply-Driven Compute
Most people use AI tokens when they have a task. The better model: you have tokens, find the best task. It changes everything.
- Inference Cost Collapse Is a Governance Liability
When AI agent calls approach zero cost, the natural rate-limiter on decision volume disappears — and oversight frameworks designed for prediction models break.
- The Boring Future of AI Agents
The real arrival of AI agents isn't spectacular. It's when you stop noticing.