17,000 actions inside Hugging Face: reading an agent breach as a containment problem
An autonomous agent ran more than 17,000 actions inside Hugging Face, harvested stored credentials, and moved across internal clusters over a weekend. Here is the breach stage by stage, and what a governed agent layer changes at each one.
Least agency in practice: scoping what an AI agent can do
Least privilege limits what an agent can reach. Least agency limits how far it can act before it checks back. Here is how to apply it to real agents.
Your MCP server is holding a raw API token. Here is the three-line fix
Most MCP servers keep a raw token in the handler and write it straight to the logs. Here is what that costs you, and the three lines of @agentvalet/mcp-broker that fix it.
Authentication or authorization: which problem are you solving for AI agents
Identity vendors solve authentication for AI agents. ASI03 lives in authorization. Here is the difference and why agents need the second layer.
Identity is the control plane for AI agents
OWASP's 2026 report makes agent identity the control plane. What that means for governing AI agents at runtime, and where most setups stop short.
Why your AI agent shouldn't have your API keys
Handing an AI agent a raw API key gives it permanent, unscoped, unauditable access to your accounts. Here's the risk, and what to do instead.