Posts tagged "security"

Running generated code safely requires isolation, denied egress, external secret handling, resource limits, authenticated output, and lifecycle cleanup—not only a container.

Structured model output is not trusted application input. Validate syntax, semantics, authorization, and effect policy again at the tool execution boundary.

A reference flow for keeping user identity, tenant, audience, and allowed actions attached to every AI tool call without trusting the model to enforce permissions.

Internal AI tools touch real company data, real permissions, and sometimes real actions. Here is how to build one that is actually secure without adding unnecessary complexity.

How I built a custom code execution engine backed by a Rust/Axum microservice, embedded directly in blog articles. Covers the security model, subprocess isolation with setrlimit, HMAC request signing, and the tradeoffs behind every decision.