Skip to content
Writing · topic

Security and identity

3 essays and 1 note.

May 29, 2025

Securing AI agents: identity, not secrets

Agents act on their own, at machine speed, across many systems. Static credentials and perimeter thinking don't hold up. Attested identity, explicit delegation and policy enforced outside the model do.

Governed AI5 min read
Apr 22, 2025

Adopting MCP in a bank: the four risks to solve first

The Model Context Protocol standardizes how agents connect to tools and data. It is silent on whether they should. Four risk areas a regulated institution should resolve before agents get tools.

Governed AI6 min read
Apr 1, 2025

The MCP spec grows up

OAuth 2.1 authorization, streamable HTTP, batching and tool annotations: the March 2025 update that made enterprise MCP plausible.

Note1 min read