BriefA short publication on AI security architecture and risk.https://brief.amoran.io/en-gbA hook is not a security boundaryhttps://brief.amoran.io/a-hook-is-not-a-security-boundary/https://brief.amoran.io/a-hook-is-not-a-security-boundary/If the host is trusted, a governance contract can prove a deny. It cannot contain a host that never asks.Sun, 30 Aug 2026 00:00:00 GMTDeny has to mean denyhttps://brief.amoran.io/deny-has-to-mean-deny/https://brief.amoran.io/deny-has-to-mean-deny/Framework callbacks observe. A governance contract has to stop the action, including when the guard crashes.Sun, 30 Aug 2026 00:00:00 GMTTwo allowed actions can still be the breachhttps://brief.amoran.io/two-allowed-actions-can-still-be-the-breach/https://brief.amoran.io/two-allowed-actions-can-still-be-the-breach/Per-tool permission is not an architecture. The control is which combinations you will not allow in one session.Sun, 30 Aug 2026 00:00:00 GMTMCP access is now an IdP problemhttps://brief.amoran.io/mcp-access-is-now-an-idp-problem/https://brief.amoran.io/mcp-access-is-now-an-idp-problem/Enterprise-managed auth moves the privilege decision off the consent screen and onto identity policy. The blast radius moves with it.Sat, 29 Aug 2026 00:00:00 GMT