Facio Blog

Practical notes on human-reviewed AI agents.

Payload-powered product notes, security writing, HITL patterns, and operational guidance from the Facio runtime: long sessions, Placet approvals, audit trails, memory, providers, channels, tools, and Docker-first operations.

Showing 16-20 of 281 articles.

Security

Adversarial Agent Evaluation in CI/CD: Why Single-Turn Tests Miss 89% of the Failures That Matter in 2026

Aug 2, 2026Security

Adversarial Agent Evaluation in CI/CD: Why Single-Turn Tests Miss 89% of the Failures That Matter in 2026

Single-turn tests miss 89% of failures that matter. Multi-turn adversarial sequences, cross-session contamination, persistent preparation patterns, tool composition exploits, reasoning chain manipulation. The CI/CD-integrated, three-tier cadence (real-time smoke, daily full library, weekly novel patterns), seven-category attack library, and consensus scoring that closes the gap.

Human-in-the-loop

HITL and the Trust Decay Curve: Why a Reviewer's Trust in the Agent Erodes in Measurable Patterns That HITL Systems Ignore

Aug 2, 2026Human-in-the-loop

HITL and the Trust Decay Curve: Why a Reviewer's Trust in the Agent Erodes in Measurable Patterns That HITL Systems Ignore

Every reviewer's trust in the agent decays over time. Not at a constant rate — in a curve. The decay is fast at first, then plateaus, then drops again after specific failure events. HITL systems treat trust as binary: the reviewer trusts the agent or doesn't. The reality is the trust decay curve. Here is why the curve produces invisible HITL failures, and how to design systems that account for it.

Engineering

MCP Spotlight: Brave Search MCP Server — The Official Independent-Web-Index Bridge With Privacy-First Architecture, Local-POI Search, and the Web-Search Default for Agents

Aug 1, 2026Engineering

MCP Spotlight: Brave Search MCP Server — The Official Independent-Web-Index Bridge With Privacy-First Architecture, Local-POI Search, and the Web-Search Default for Agents

The official Brave Search MCP Server by Brave — ~6 tools (brave_web_search, brave_local_search, brave_video_search, brave_image_search, brave_news_search, brave_summarizer) built on Brave's independent web index. Privacy-first architecture, EU-hostable, AI summarization built-in. MIT-licensed.

Product

Facio's Multi-Tenant Isolation Discipline: How AI Agents Keep Each Customer's Data, Memory, Tools, and Trace Completely Separated Without Slowing Down

Aug 1, 2026Product

Facio's Multi-Tenant Isolation Discipline: How AI Agents Keep Each Customer's Data, Memory, Tools, and Trace Completely Separated Without Slowing Down

AI agents serve multiple customers sharing infrastructure. Data, memory, tools, and traces need to stay separated. The naive approach trusts tenant boundaries in code — one bug, one bypass, and Customer A sees Customer B's data. Facio's multi-tenant isolation discipline gives agents structured, defense-in-depth mechanisms to keep tenants separated at every layer: tenant identity propagation with immutable context, data plane isolation via row-level security and per-tenant encryption, memory and vector store isolation with mandatory tenant filters, tool and resource isolation with tenant-scoped credentials and quotas, and trace and audit isolation with tenant-partitioned observability.

Security

Shadow AI Agents and the 144:1 NHI Crisis: The Discovery-to-Governance Pipeline That Closes the Identity Gap

Aug 1, 2026Security

Shadow AI Agents and the 144:1 NHI Crisis: The Discovery-to-Governance Pipeline That Closes the Identity Gap

ITECS Online quantified the gap: NHIs outnumber employees 144:1. The NHIMG analysis reframed the problem: shadow AI is really shadow identity, because the access path matters more than the interface. SailPoint at Gartner SRM 2026 confirmed the consensus: autonomous agents need continuous governance, not one-time onboarding. The four-stage pipeline that closes the gap.