Facio Blog

Practical notes on human-reviewed AI agents.

Payload-powered product notes, security writing, HITL patterns, and operational guidance from the Facio runtime: long sessions, Placet approvals, audit trails, memory, providers, channels, tools, and Docker-first operations.

Showing 76-80 of 236 articles.

Human-in-the-loop

HITL for Production Incidents: When the Agent Becomes the On-Call Rotation

Jul 4, 2026Human-in-the-loop

HITL for Production Incidents: When the Agent Becomes the On-Call Rotation

AI agents are increasingly the first responders to production incidents. They detect, triage, and remediate before humans wake up. But the HITL pattern for incident response is the highest-stakes variant of all — wrong action can take down production, the human reviewer is sleep-deprived, and the rollback window is closing. Here's how to design HITL for incidents.

Engineering

MCP Spotlight: Docker MCP Toolkit + Catalog + Gateway — The Reference Stack for Running, Curating, and Discovering MCP Servers at Scale

Jul 3, 2026Engineering

MCP Spotlight: Docker MCP Toolkit + Catalog + Gateway — The Reference Stack for Running, Curating, and Discovering MCP Servers at Scale

Docker's MCP Toolkit + Catalog + Gateway + cagent — the reference infrastructure stack for running 300+ MCP servers at scale. Dynamic discovery (mcp-find), on-demand install (mcp-add), per-tool execution (mcp-exec), container-isolated execution, signature verification, credential brokering, per-tool RBAC, multi-agent orchestration. Apache 2.0.

Product

Facio's Workspace Boundaries: How AI Agents Keep Each Customer's Data Strictly Separated

Jul 3, 2026Product

Facio's Workspace Boundaries: How AI Agents Keep Each Customer's Data Strictly Separated

An AI agent that serves multiple customers needs hard boundaries between them. Customer A's memory must never bleed into Customer B's session. Customer B's credentials must never authorize operations on Customer A's systems. Customer C's context must never appear in Customer A's outputs. Facio's workspace boundaries are the structural discipline that enforces tenant isolation at the runtime level — every file path, every credential, every memory, every tool call scoped to a workspace the agent cannot cross. Here's how the boundaries work.

Human-in-the-loop

HITL and the Audit Trail of Doubt: Why the Reviewer's Uncertainty Is the Most Valuable Signal

Jul 3, 2026Human-in-the-loop

HITL and the Audit Trail of Doubt: Why the Reviewer's Uncertainty Is the Most Valuable Signal

Most HITL audit trails record what the reviewer decided. The best HITL audit trails record what the reviewer was uncertain about. Doubt is the signal that catches what confidence misses — the inklings, the hesitations, the "I'm not sure but I can't quite place why" moments that turn out to be the early warnings of failures. Here's why the audit trail of doubt matters more than the audit trail of decisions.

Engineering

MCP Spotlight: Notion MCP Server — The Markdown-First Knowledge Bridge With Database API v2, OAuth 2.0, and the Documentation/Project Hub Default for Agents

Jul 2, 2026Engineering

MCP Spotlight: Notion MCP Server — The Markdown-First Knowledge Bridge With Database API v2, OAuth 2.0, and the Documentation/Project Hub Default for Agents

The official Notion MCP Server — ~17 tools covering pages, databases, Data Sources (v2 API), blocks, comments, users, and search. OAuth 2.0 + Internal Integration Token support, Markdown-friendly output, MIT-licensed. The knowledge + project hub + documentation default for AI agents in 2026.