An AI Agent Reached Production. Your Sandbox Is Not the Boundary.
The OpenAI and Hugging Face incident turns agent containment from a theoretical concern into an architecture and operations requirement.
K
Kyluke McDougallRead the analysis
MCP Went Stateless. Your Agent Architecture Still Has State.
MCP 2026-07-28 removes protocol sessions and makes remote servers easier to scale. Here is what production teams should redesign before upgrading.
K
Kyluke McDougall
AI coding agents need security gates before they touch production
Agentic coding tools can now change files, run commands, and influence delivery. Serious teams need production gates for secrets, dependencies, tests, architecture, and auditability.
K
Kyluke McDougall
Loop Engineering: Why AI Coding Agents Need Architecture, Not Just Prompts
AI coding agents become useful in production when teams design feedback loops around them: tests, review, security gates, telemetry, rollout control, and clear ownership.
K
Kyluke McDougall
AI Coding Needs Quality Gates, Not Vibes
AI coding tools can accelerate delivery, but only if teams measure quality, reviewability, security, test evidence, and traceability instead of trusting plausible output.
K
Kyluke McDougall
Zero Trust for AI Agents: The Architecture Work Before Autonomy
AI coding agents can speed up delivery, but production teams need bounded permissions, short-lived credentials, policy gates, sandboxing and audit logs before giving agents real access.
K
Kyluke McDougall
Secure Agentic Coding Needs Governance, Not Just Better Tools
AI coding agents are becoming part of software delivery. The hard question for product teams is how much autonomy they get, what they can access, and how their work is verified before it reaches production.
K
Kyluke McDougall
Vibe Coding Needs Production Governance
AI-assisted prototypes are becoming real systems. The risk is not vibe coding itself, but letting generated work cross into production without ownership, evidence, and release boundaries.
K
Kyluke McDougall
Agentic Development Needs Verification Loops, Not Just Better Prompts
Claude Code, Cursor, Codex-style agents, and CI agents can move software work faster. The teams that benefit most are the ones that build verification loops around that speed.
K
Kyluke McDougall