Tag
security
10 posts with this tag.
·6 min read
OpenCode Security Breach: What to Do With Your API Keys
OpenCode says a Console breach may have exposed users' OpenAI, Anthropic and Google keys. A checklist to revoke, rotate, check billing and cap spend.
·12 min read
SOC 2 for AI Systems: What Auditors Check
What SOC 2 AI controls do auditors check in 2026? All 5 trust service criteria, common gaps, and prep steps before your next audit.
·9 min read
Vetting AI Tools: How to Avoid Fake AI Apps and Malware
Fake AI apps and malware sites now outrank the real download on Google. Run this 7-step check for vetting AI tools before your team installs anything.
·11 min read
AI Incident Response Plan Template for Small Teams (2026)
5-phase AI incident response plan template for 2026: copy the roles, notification checklist, and timeline, then test it in a 90-minute tabletop drill.
·9 min read
TypeScript AI Agent Output Validation Patterns with Code
Copy-paste TypeScript patterns for AI agent output validation: Zod schema enforcement, PII redaction, content policy filtering, JSON repair, hallucination guardrails, and cost circuit breakers. Working code.
·14 min read
TypeScript AI Agent Authorization Patterns: Allowlist, RBAC
6 TypeScript AI agent authorization patterns: allowlist, scoped tokens, RBAC, rate limiter, audit log, HITL gate. Each under 80 lines. Express-compatible.
·13 min read
AI Vendor Due Diligence Questionnaire: 30-Minute Gate
AI vendor due diligence questionnaire: 5 gate questions, 8 deep questions, the evidence to file and a 1-3 scoring sheet, run on OpenAI and Anthropic terms.
·7 min read
AI Vendor Evaluation Checklist for Small Teams (20-Point)
Checklist to evaluate AI vendors before signing: data handling, training opt-out, DPA availability, security certifications, and exit rights. Under 30 min.