Tag

credentials

3 entries, including 1 pattern.

1. 22 Sept

   A session ID is not a credential

   Conversation continuity tracks state. It does not prove who is calling.

   • governance
   • agents
   • credentials
   • threat-model
2. Pattern5 Sept

   Verified Agent Containment

   A control pattern for security architects and platform teams who run coding agents or MCP-backed tools on shared hosts. It replaces the comfort label “sandbox on” with an explicit, checkable isolation boundary so the agent cannot silently inherit the estate’s network paths and cloud identity.

   • agents
   • sandbox
   • credentials
   • threat-model
   • network
3. 4 Sept

   An outbound token is not inbound auth

   A stored upstream credential lets the MCP server act. It does not prove who is calling it. Two Critical advisories show the same residual when that gate is missing.

   • agents
   • mcp
   • guardrails
   • credentials