Loading…
Loading…
Tag
11 posts with this tag.
·13 min read
5 TypeScript modules for AI agent observability: trace context, token and cost metering, structured event logging, tool-call tracing, and OpenTelemetry export. Express and Next.js compatible, with the governance reasons each one matters.
·11 min read
When your AI agent sends a wrong email, makes a bad purchase, or deletes data, the law says you are responsible, not the AI. Here is what small teams must do before deploying autonomous agents in 2026.
·10 min read
AI agents that store personal data in RAG systems and vector databases cannot easily fulfill GDPR erasure requests. Here is what Spanish regulators found in 2026 and how to fix it before your next audit.
·10 min read
Copy-paste AI agent governance policy for teams of 5-50. Covers authorization scope, data minimization, human-in-the-loop triggers, audit log format, and the 5 actions agents must never take without human approval.
·9 min read
AI agents accumulate OAuth tokens, API keys, and tool permissions without formal approval processes. Here is how to find unauthorized agents in your environment, assess their access, and build an access inventory before something goes wrong.
·10 min read
Model Context Protocol (MCP) servers give AI agents access to your filesystem, databases, and APIs. Here are the 5 attack vectors, 12-point governance checklist, and access scope framework every engineering team should implement before deploying agents with MCP.
·9 min read
Copy-paste TypeScript patterns for AI agent logging and audit trails: structured span logging with OpenTelemetry, PII-safe trace storage, compliance-ready audit records, token usage tracking, and decision trail for human review. Working code.
·9 min read
Copy-paste TypeScript patterns for AI agent output validation: Zod schema enforcement, PII redaction, content policy filtering, JSON repair, hallucination guardrails, and cost circuit breakers. Working code.
·14 min read
6 TypeScript AI agent authorization patterns with working code: allowlists, scoped tokens, RBAC, rate limits, audit logging, and human-in-the-loop gates. Copy-paste for Express or Next.js.
·14 min read
4 TypeScript modules for AI agent security incidents: prompt injection detector, circuit breaker, audit logger, tool authorization gate. Express and Next.js compatible with full Vitest test suite.