RC RANDOM CHAOS

AI agent security

3 posts

A smarter model would have leaked it too.
Article

A smarter model would have leaked it too.

GitHub's AI agent leaked private repos not from a bug but a design failure. How two-plane architecture, scoped tokens, and deterministic validation stop it.

 An open door where the gate should be
Article

An open door where the gate should be

GitHub's AI agent returned private repo content when tricked, proving it holds read reach across the private boundary with no enforced refusal.

 DayBreak doesn't make your systems vulnerable
Article

DayBreak doesn't make your systems vulnerable

A capable security model like DayBreak doesn't add new risk - it exposes that your agent controls were calibrated for a model too weak to exploit them.