OpenAI Hugging Face Incident: Agent Boundary Failure
A technical breakdown of the OpenAI and Hugging Face incident, what failed, and why AI agent security needs external boundaries.
Read post ↗Introducing credentials in agentjail v1.6.0
agentjail v1.6.0 introduces encrypted credential storage, eager session delivery, and exact-ID credential requests from Codex and Claude.
Read post ↗v1.7.0: Bounded authority, visible to the agent
agentjail v1.7.0 guides agents to governed host access, adds exact session-bound grant foundations, and fixes Codex 0.150.1 approval loops.
Read post ↗v1.3.0: Codex can ask before Bash runs
agentjail v1.3.0 turns every effective Codex Bash ask into a native approval prompt backed by a one-use, session-bound command broker.
Read post ↗Cursor 0-day: a planted git.exe runs when you open a repo
An unpatched Cursor 0-day executes a planted git.exe the moment you open a repo. How it works, why agent guardrails miss it, and what to do now.
Read post ↗Your coding agent is uploading your repo. I checked.
Grok Build CLI uploads your repo and .env by default. I read the binary, caught it on the wire, and blocked the leak without breaking the tool.
Read post ↗The agent that fired its own bodyguard
We asked an agent to clean up the dev environment. It found the security hook and tried to remove it. Here is how v0.2.0 makes that a three-layer problem.
Read post ↗Introducing agentjail
Coding agents act on your behalf, which is what makes them risky. agentjail enforces policy at the tool boundary, offline, before a dangerous call runs.
Read post ↗