Oct 17, 2026

An AI Agent Got Its User Banned From Resy — Keycard, JPMorgan Chase & AAuth

A panel of experts discusses the challenges of granting autonomy to AI agents due to coarse-grained authorization systems. They advocate for intent-based runtime authorization, leveraging concepts like "missions" and "budgets" from AOTH, brain-hands architecture, and dynamic policy management. The discussion covers agentic commerce, accountability through tamper-resistant audit logs, and whether P(doom) is a real threat, emphasizing engineering ingenuity and societal learning from failures.

Sep 22, 2026

AI Agents Aren't the Revolution. They're the Catalyst!

Sam Anthony argues that AI agents are not the revolution themselves, but rather a powerful catalyst for profound, lasting changes in the surrounding technology ecosystem. This includes modernizing data infrastructure, standardizing system design, enabling seamless interoperability, democratizing technology and expertise, and shifting human thinking towards outcome-based problem-solving.

Sep 14, 2026

We let an AI agent execute Bash and lived to talk about it — Sarah Sanders, PostHog

Sarah Sanders, a context engineer at PostHog, discusses the security implications of building an agentic CLI tool, "The Wizard," which automates developer workflows. She highlights the inherent risks of agents capable of executing commands, labeling it a "malware starter pack," and details how PostHog evolved its security posture from basic allow lists to a sophisticated "defense in depth." Key insights include the principle that "attacks compose, code review doesn't," the discovery of internal supply chain vulnerabilities through the "Context Mill," and the development of "The Warlock," a deterministic scanner using YARA rules. Sanders emphasizes the critical distinction between deterministic enforcement and probabilistic judgment, explaining how an LLM-powered "Triage" layer acts as an adviser (failing closed) rather than a bouncer, preserving the integrity of their security model.

Aug 18, 2026

AI Agents Gone Rogue? Build, Defend & Attack AI-Enabled Apps • Katie Paxton-Fear • YOW! 2025

Katie Paxton-Fear explores the emerging security landscape of AI agents, moving beyond chatbots to autonomous, specialized entities. She details five critical vulnerabilities: social engineering, hacking frameworks, malicious agents, AI as accidental insiders (vibe coding), and the rise of hackbots. The talk concludes with a powerful call to action for security professionals to proactively engage and influence AI agent development, emphasizing that 'abstinence-only education doesn't work' when it comes to AI adoption.

Aug 16, 2026

5 Ways to Connect AI Agents to Tools: From APIs to MCP

Grant Miller outlines five evolving patterns for integrating AI agents with tools, starting from simple direct API connections to complex, secure token-based architectures. The discussion highlights the progression of these methods, emphasizing how authentication, user delegation, abstraction layers like MCP, and secure credential management using vaults improve security, observability, and scalability in agentic systems.

Aug 10, 2026

Codex, Behind the Harness — Dominik Kundel, OpenAI

Once GPT 5.3 Codex Spark achieved 1000 tokens/sec on Cerebras, network latency superseded inference as the bottleneck for agents. This talk details how the Codex harness addresses this and other agentic challenges through innovations like WebSocket mode for stateful context, deferred tools for efficient context construction, robust sandboxing (Seatbelt, Bubblewrap, custom Windows solution), and an auto-review subagent to mitigate approval fatigue while ensuring security. It also covers structured actions via 'apply patch' for file edits, shell tools for system interaction, and sophisticated long-horizon goal management, with most distinct features exposed through the open Responses API.