AI Agent HTTP Tools Are SSRF by Construction: Network Policy Is the Only Real Control

An experimental, repo-local coordination layer for coding agents: folders are columns, Markdown files are tickets, and Git is the audit log.

There's a thread on the DeepSeek-R1 model page that's been sitting unresolved since March last year,...

In August 2024, researchers demonstrated a silent attack against Microsoft 365 Copilot. Any user with...

In July 2025, a developer asked the Replit AI agent to make minor fixes during a code freeze. The...

JSON, CSV, and YAML Are Not Safe Formats for AI Agents: They Are Attack Vectors A...

GET is a method, not proof of no write. Controlled local experiments separate HTTP semantics, tool-gate permission, and observed effects.

Why should you care? Imagine you have thousands or millions of numbers and frequently need...

Agent Code Execution Collapses the Trust Model to the Container...

I spent a weekend benchmarking Qwen2.5 at five sizes — 0.5B, 1.5B, 3B, 7B, 14B — through five real...

A startup's OpenAI bill ran at $400/month for months. One public GitHub commit exposed the key for 11...