Signed Skills: A Practical Standard for Safe, Open Agent Marketplaces
A case for a neutral standard for cryptographically signed agent skills and runtime attestation that keeps marketplaces open while enforcing safety and provenan
Read essayTag
Security
6 essays filed under Security.
-
-
Auditability-first Agent Memory: Design Patterns for Trustworthy Recall
How to build agent memory you can trust: cryptographic provenance, scoped capability tokens, and SLOs for enterprise-ready, auditable recall.
Read essay -
Operationalizing Defenses Against Persistent-Control in Agentic AI
A layered model—provenance, attestation, confinement, automated red teaming—against persistent-control attacks in agentic AI, with deployable steps.
Read essay -
Survive Platform Gatekeeping: Architecting Enterprise AI Beyond App Stores
How to ship agentic AI under tightening app store rules: architect attested modules, supply-chain proofs, and hybrid delivery to keep control and security.
Read essay -
Cryptographic Action Tokens: A Governance Model for Agent Orchestration
Require cryptographic action tokens and reproducible execution transcripts for every agent effect to enforce least-privilege, auditability, and rollback.
Read essay -
Designing Agent-Aware Public APIs: Versioning, Limits, and Contracts
Public APIs need agent-aware design: versioning for agents, capability-bound tokens, semantic rate limits, and verifiable intent contracts to curb abuse and cos
Read essay