Facio Blog

Practical notes on human-reviewed AI agents.

Payload-powered product notes, security writing, HITL patterns, and operational guidance from the Facio runtime: long sessions, Placet approvals, audit trails, memory, providers, channels, tools, and Docker-first operations.

Clear

Showing 1-5 of 53 articles in Security.

Security

Runtime Policy Engine Architecture for AI Agents: Why 7 Policy Layers Are the Minimum Stack That Survives the Multi-Vector Threat Model

Featured article

Runtime Policy Engine Architecture for AI Agents: Why 7 Policy Layers Are the Minimum Stack That Survives the Multi-Vector Threat Model

The Maxim AI 2026 implementation guide confirmed: AI guardrails are runtime controls that validate inputs to and outputs from an LLM against safety, security, and compliance policies — and the operational reality is that single-vector guardrails (NeMo, Llama Guard, Lakera Guard) miss the multi-vector attacks that the 2026 incident data documents. The Context Studios analysis named the architectural commitment: production agents need runtime policy, structural command parsing, sandboxing, provenance-tagged memory writes, identity, traces, evals, compliance exports, and incident-to-test regression loops. The seven-layer architecture that satisfies the commitment.

Aug 3, 2026Security
Read article

Security

Adversarial Agent Evaluation in CI/CD: Why Single-Turn Tests Miss 89% of the Failures That Matter in 2026

Aug 2, 2026Security

Adversarial Agent Evaluation in CI/CD: Why Single-Turn Tests Miss 89% of the Failures That Matter in 2026

Single-turn tests miss 89% of failures that matter. Multi-turn adversarial sequences, cross-session contamination, persistent preparation patterns, tool composition exploits, reasoning chain manipulation. The CI/CD-integrated, three-tier cadence (real-time smoke, daily full library, weekly novel patterns), seven-category attack library, and consensus scoring that closes the gap.

Security

Shadow AI Agents and the 144:1 NHI Crisis: The Discovery-to-Governance Pipeline That Closes the Identity Gap

Aug 1, 2026Security

Shadow AI Agents and the 144:1 NHI Crisis: The Discovery-to-Governance Pipeline That Closes the Identity Gap

ITECS Online quantified the gap: NHIs outnumber employees 144:1. The NHIMG analysis reframed the problem: shadow AI is really shadow identity, because the access path matters more than the interface. SailPoint at Gartner SRM 2026 confirmed the consensus: autonomous agents need continuous governance, not one-time onboarding. The four-stage pipeline that closes the gap.

Security

The Credential Lifecycle That Actually Rotates: Why 86% of Organizations Cannot Rotate AI Agent Secrets on the Cadence They Specified

Jul 31, 2026Security

The Credential Lifecycle That Actually Rotates: Why 86% of Organizations Cannot Rotate AI Agent Secrets on the Cadence They Specified

The Security Boulevard CISO playbook: 86% of organizations cannot rotate AI agent secrets on the cadence they specified. The five-stage credential lifecycle (pre-issuance attestation, JIT issuance, continuous rotation, JIT revocation, post-revocation auditing), the multi-protocol authentication integration, and the ephemeral credential model for delegated access that close the gap.

Security

The 80% Reachability Problem: Why AI Agents Need Microsegmentation, Not Just Identity Controls, to Stop the AILM Era

Jul 29, 2026Security

The 80% Reachability Problem: Why AI Agents Need Microsegmentation, Not Just Identity Controls, to Stop the AILM Era

The Zero Networks Lateral Movement Exposure Report: 80% of enterprise servers reachable through chained identity and network permissions. The Orca Security analysis named the new category: AI-Induced Lateral Movement (AILM) — agents as attack pivots using legitimate credentials. Identity-aware microsegmentation with per-segment cryptographic tokens, sequence analysis, and JIT grants is the only defense.