Facio Blog

Practical notes on human-reviewed AI agents.

Payload-powered product notes, security writing, HITL patterns, and operational guidance from the Facio runtime: long sessions, Placet approvals, audit trails, memory, providers, channels, tools, and Docker-first operations.

Showing 131-135 of 281 articles.

Human-in-the-loop

HITL Drift: Why Your Approval Gate Becomes Theater After 90 Days in Production

Jul 1, 2026Human-in-the-loop

HITL Drift: Why Your Approval Gate Becomes Theater After 90 Days in Production

Every HITL system starts with rigor and ends with rubber stamps. The reviewer who approved carefully in week one is clicking through 200 approvals per day in month three. The policy that was careful in version 1.0 is full of exemptions in version 4.2. Here's how HITL systems drift into theater — and the early warning signs that catch the drift before it's too late.

Engineering

MCP Spotlight: Resend MCP Server — The React-Email-Native Transactional Email Bridge, Full Audience Management, and the Communication Default for Agents

Jun 30, 2026Engineering

MCP Spotlight: Resend MCP Server — The React-Email-Native Transactional Email Bridge, Full Audience Management, and the Communication Default for Agents

The Resend MCP Server — the email-agent default of 2026. ~20 tools (emails, audiences, broadcasts, domains, webhooks, deliverability analytics), native React Email template support (JSX compiles at send-time), MIT-licensed. Built on the infrastructure Anthropic, Linear, and Vercel use.

Product

Facio's Quota and Rate Limit Awareness: How AI Agents Stay Under the Caps Without Throttling the Workflow

Jun 30, 2026Product

Facio's Quota and Rate Limit Awareness: How AI Agents Stay Under the Caps Without Throttling the Workflow

Every external system an AI agent touches has limits. APIs have rate limits per second. Models have token quotas per minute. Storage services have request budgets per hour. Email services have daily send caps. The naive agent hits these limits and fails. The disciplined agent tracks consumption in real time, paces its requests to stay under the caps, batches where possible, and shifts work to alternative windows when quotas are tight. Facio's quota awareness turns a brittle integration into a predictable operation. Here's how the discipline works.

Security

The Network Boundary Your AI Agent Bypasses Every 30 Seconds: Why Egress Filtering Is the Last Line of Defense for AI Agent Data Exfiltration

Jun 30, 2026Security

The Network Boundary Your AI Agent Bypasses Every 30 Seconds: Why Egress Filtering Is the Last Line of Defense for AI Agent Data Exfiltration

Your agent calls 47 external endpoints per hour. The data flowing through those calls contains customer PII, internal documents, and credential tokens. The egress firewall sees HTTPS to github.com — it cannot see the tool call's arguments. Egress filtering must operate at the agent's tool invocation layer, not at the network layer.