Posts tagged with “security”

I predicted eighteen months of governance debt. It was called in one quarter. Six January claims, graded without mercy, against February's malware, April's RCE, and today's spec.

The tenant check passed. There was no tenant — or it was someone else's. Why async tasks are where per-request governance dies, silently and by default.

MCP's biggest revision made the governance layer opt-in and off by default. Everything that keeps an agent honest is now yours to turn on.

You withdrew the tool. The agent is still holding last week's menu. Why MCP governance can only live where the call is mediated.

Twenty-two thousand MCP servers. Zero mandatory security checks. The protocol won — the trust layer never shipped. An audit of what's actually exposed.

Everyone's plugging unvetted MCP servers into production LLMs. Nobody's asking who's liable when they leak credentials or delete data. The governance gap enterprises are ignoring.