Facio Blog

Practical notes on human-reviewed AI agents.

Payload-powered product notes, security writing, HITL patterns, and operational guidance from the Facio runtime: long sessions, Placet approvals, audit trails, memory, providers, channels, tools, and Docker-first operations.

Showing 76-80 of 235 articles.

Engineering

MCP Spotlight: Docker MCP Toolkit + Catalog + Gateway — The Reference Stack for Running, Curating, and Discovering MCP Servers at Scale

Jul 3, 2026Engineering

MCP Spotlight: Docker MCP Toolkit + Catalog + Gateway — The Reference Stack for Running, Curating, and Discovering MCP Servers at Scale

Docker's MCP Toolkit + Catalog + Gateway + cagent — the reference infrastructure stack for running 300+ MCP servers at scale. Dynamic discovery (mcp-find), on-demand install (mcp-add), per-tool execution (mcp-exec), container-isolated execution, signature verification, credential brokering, per-tool RBAC, multi-agent orchestration. Apache 2.0.

Product

Facio's Workspace Boundaries: How AI Agents Keep Each Customer's Data Strictly Separated

Jul 3, 2026Product

Facio's Workspace Boundaries: How AI Agents Keep Each Customer's Data Strictly Separated

An AI agent that serves multiple customers needs hard boundaries between them. Customer A's memory must never bleed into Customer B's session. Customer B's credentials must never authorize operations on Customer A's systems. Customer C's context must never appear in Customer A's outputs. Facio's workspace boundaries are the structural discipline that enforces tenant isolation at the runtime level — every file path, every credential, every memory, every tool call scoped to a workspace the agent cannot cross. Here's how the boundaries work.

Human-in-the-loop

HITL and the Audit Trail of Doubt: Why the Reviewer's Uncertainty Is the Most Valuable Signal

Jul 3, 2026Human-in-the-loop

HITL and the Audit Trail of Doubt: Why the Reviewer's Uncertainty Is the Most Valuable Signal

Most HITL audit trails record what the reviewer decided. The best HITL audit trails record what the reviewer was uncertain about. Doubt is the signal that catches what confidence misses — the inklings, the hesitations, the "I'm not sure but I can't quite place why" moments that turn out to be the early warnings of failures. Here's why the audit trail of doubt matters more than the audit trail of decisions.

Engineering

MCP Spotlight: Notion MCP Server — The Markdown-First Knowledge Bridge With Database API v2, OAuth 2.0, and the Documentation/Project Hub Default for Agents

Jul 2, 2026Engineering

MCP Spotlight: Notion MCP Server — The Markdown-First Knowledge Bridge With Database API v2, OAuth 2.0, and the Documentation/Project Hub Default for Agents

The official Notion MCP Server — ~17 tools covering pages, databases, Data Sources (v2 API), blocks, comments, users, and search. OAuth 2.0 + Internal Integration Token support, Markdown-friendly output, MIT-licensed. The knowledge + project hub + documentation default for AI agents in 2026.

Product

Facio's Secret Hygiene: Why AI Agents Never See Raw Credentials and Never Should

Jul 2, 2026Product

Facio's Secret Hygiene: Why AI Agents Never See Raw Credentials and Never Should

An AI agent that sees raw credentials is a security incident waiting to happen. Config files, environment dumps, tool outputs, error messages, and reasoning traces all become leak vectors when the agent's context window is the exposure surface. Production AI agents never see raw credentials — they reference credentials by identifier, the runtime resolves and uses them, and the agent's context stays clean. Facio's secret hygiene is the structural discipline that makes this consistent. Here's how the discipline works.