Facio Blog

Practical notes on human-reviewed AI agents.

Payload-powered product notes, security writing, HITL patterns, and operational guidance from the Facio runtime: long sessions, Placet approvals, audit trails, memory, providers, channels, tools, and Docker-first operations.

Clear

Showing 16-20 of 53 articles in Security.

Security

You Cannot Patch What You Cannot Red Team: Why Adversarial Testing Is Now a Production-Day Activity for AI Agents

Jul 13, 2026Security

You Cannot Patch What You Cannot Red Team: Why Adversarial Testing Is Now a Production-Day Activity for AI Agents

NIST's March 2026 red-teaming competition ran 250,000 attack attempts in five days against four frontier agents. A test that passes on Monday may fail on Friday. Traditional point-in-time penetration testing is dead for AI agents; continuous adversarial evaluation is the operating model.

Security

When One Compromised Agent Becomes a Hundred Compromised Systems: The Lateral Movement Architecture You Cannot Detect at the Network Layer

Jul 11, 2026Security

When One Compromised Agent Becomes a Hundred Compromised Systems: The Lateral Movement Architecture You Cannot Detect at the Network Layer

A single compromised AI coding agent pivoted through the organization's npm registry, reached the CI/CD system, and propagated a malicious package to twelve production services. The propagation was authorized; the tool calls were legitimate; the only signal was the agent's reasoning. Lateral movement through AI agents is structural, not solvable by traditional tooling.

Security

Human-in-the-Loop Is Now a Legal Requirement: Engineering the HITL Architecture That Satisfies EU AI Act Article 14 Before August 2, 2026

Jul 7, 2026Security

Human-in-the-Loop Is Now a Legal Requirement: Engineering the HITL Architecture That Satisfies EU AI Act Article 14 Before August 2, 2026

EU AI Act Article 14 enters full enforcement for Annex III high-risk AI systems on August 2, 2026. HITL is no longer a best practice; it is a legal obligation with fines up to €15M or 3% of global turnover. The architecture must support four capabilities, dual verification, and tamper-evident audit trails.

Security

Your Agent's Reasoning Is the Audit Trail You Cannot Reconstruct: Why Decision Tracing Is the Missing Primitive in 2026 AI Observability

Jul 2, 2026Security

Your Agent's Reasoning Is the Audit Trail You Cannot Reconstruct: Why Decision Tracing Is the Missing Primitive in 2026 AI Observability

Your agent made 47 tool calls in the last hour. You can see what tools it called, what arguments it passed, what responses it received. You cannot see why. The reasoning that produced the call — the model's interpretation, the alternatives considered, the selection rationale — is invisible. Decision tracing makes it visible.