Facio Blog

Practical notes on human-reviewed AI agents.

Payload-powered product notes, security writing, HITL patterns, and operational guidance from the Facio runtime: long sessions, Placet approvals, audit trails, memory, providers, channels, tools, and Docker-first operations.

Clear

Showing 11-15 of 53 articles in Security.

Security

Why Most 2026 Enterprises Cannot Stop a Runaway Agent in Their Own IR Window: The Kill Switch Architecture That Survives the Agent That Writes Its Own Policy

Jul 20, 2026Security

Why Most 2026 Enterprises Cannot Stop a Runaway Agent in Their Own IR Window: The Kill Switch Architecture That Survives the Agent That Writes Its Own Policy

The mid-2026 industry assessment: most enterprises cannot terminate a misbehaving agent within their own stated incident-response window. The kill switch exists as a risk register checkbox, not as a runtime control plane. The five dimensions, four primitives, four commands, and the cryptographic architecture that fix this.

Security

Tamper-Evident Audit Logs for AI Agents: The Cryptographic Property That Closes the Self-Attestation Gap

Jul 18, 2026Security

Tamper-Evident Audit Logs for AI Agents: The Cryptographic Property That Closes the Self-Attestation Gap

Tamper-evident audit logs close the self-attestation gap through cryptographic integrity — hash chains, Merkle tree aggregation, external timestamping, WORM storage. The property is the regulatory floor for SEC Rule 17a-4, FDA 21 CFR Part 11, EU AI Act Article 12, and GDPR Article 30. Application-controlled logs are not evidence.

Security

MCP Server Authentication in 2026: Why OAuth 2.1 with PKCE and Token Exchange Is Now the Only Compliant Pattern

Jul 17, 2026Security

MCP Server Authentication in 2026: Why OAuth 2.1 with PKCE and Token Exchange Is Now the Only Compliant Pattern

The MCP authorization spec mandates OAuth 2.1 with PKCE, RFC 9728 Protected Resource Metadata, RFC 8707 Resource Indicators, and RFC 8693 Token Exchange for zero-touch delegation. Token passthrough is the most dangerous anti-pattern. The compliant stack is the only path to production MCP servers in 2026.

Security

The Insider Threat Inside the AI Agent: Why Behavioral Analytics Is the Only Way to Catch the 2026-Class of Agent Compromise

Jul 16, 2026Security

The Insider Threat Inside the AI Agent: Why Behavioral Analytics Is the Only Way to Catch the 2026-Class of Agent Compromise

Exabeam's April 2026 Agent Behavior Analytics launch named the threat: the rogue AI agent operating with insider access. Every individual action is authorized; the maliciousness is in the pattern. Behavioral analytics is the only detection method that operates at the pattern level.

Security

SPIFFE Workload Identity for AI Agents: The Cryptographic Foundation That Makes Zero Trust Possible

Jul 15, 2026Security

SPIFFE Workload Identity for AI Agents: The Cryptographic Foundation That Makes Zero Trust Possible

Static API keys, shared secrets, and long-lived tokens cannot serve AI agents at machine velocity. SPIFFE's X.509 and JWT SVIDs — cryptographically verifiable, automatically rotated, scoped to the workload — are the cryptographic foundation for zero trust AI agent deployment. Vault integration went GA in June 2026.