Tokenless

Agent security

Give the Agent a Budget, Not a Token — Sachin Malhotra, Anthropic

Give the Agent a Budget, Not a Token — Sachin Malhotra, Anthropic

Sachin Malhotra's talk outlines a critical framework for safely deploying autonomous agents in production, moving beyond simple token-based access. He introduces 'asymmetric verbs,' refilling 'rate limits,' 'trip wires' for aggregate monitoring, and the 'undo test' as a lens. A central tenet is that infrastructure (via a proxy) must stamp an agent's identity, preventing agents from circumventing controls and ensuring accountability, thus providing a "budget" instead of an unbounded "token."

Through the AI Fog: The Architectural Decision Agentic Security Depends On — Manoj Nair, Snyk

Through the AI Fog: The Architectural Decision Agentic Security Depends On — Manoj Nair, Snyk

Manoj Nair of Snyk reveals alarming data on AI-driven security risks, emphasizing that generative AI and validation systems cannot be the same. He highlights issues like autonomous attacks, rampant vulnerabilities in AI-generated code and skills, and PII leakage. Snyk's solution, Evo, integrates deterministic prevention and remediation to secure the agentic development lifecycle.

You Didn't Ship a Bug. You Just Wrote It for a Human. - Ravi Madabhushi, Scalekit

You Didn't Ship a Bug. You Just Wrote It for a Human. - Ravi Madabhushi, Scalekit

Ravi Madabhushi details how existing infrastructure, designed for human users, fails AI agents, leading to issues like rate limits and over-permissioning. He argues for treating agents as first-class principals with fine-grained, context-aware authorization and robust visibility to prevent non-deterministic and potentially rogue behaviors.

The Blueprint for Autonomous Work Agents | Gavriel Cohen, NanoClaw

The Blueprint for Autonomous Work Agents | Gavriel Cohen, NanoClaw

Kovid Goyal, founder of NanoClaw, discusses his journey from a serendipitous encounter with Singapore's Foreign Minister to evolving NanoClaw into an enterprise AI deployment company. He shares insights on personal vs. team-managed agents, the "second brain" as a killer use case, NanoClaw's security-first architecture, and the future challenges of managing open-source projects and enterprise AI deployments in an era of rapidly evolving agent technology.

Stop AI Agents From SQL Injecting Your Database

Stop AI Agents From SQL Injecting Your Database

Averi Kitsch, Staff Software Engineer at Google, outlines a four-step evolution for securing AI agents that access databases, moving from dangerous, model-controlled tools to a zero-trust architecture. Drawing on insights from over 20 million monthly tool calls, the talk provides a practical roadmap for preventing data leaks by separating identities, constraining actions, and removing credentials and PII from the agent's control.