Before Your Pydantic-AI Agent Fetches Another Page, Run This Containment Check
Pin the fixed pydantic-ai release and run three exposure checks before an agent fetches untrusted pages.
Playbooks
Make agent 'done' checkable: transcript audit plus planted defects
Treat agent completion as an artifact check: audit which files were opened and run planted-defect tests before accepting a review.
Run a one-hour agent fleet audit to find control gaps before an incident
Name every agent, owner, and data path, then test whether you can stop a runaway agent before it becomes an incident.
Audit Your Agent Fleet Before Review
Run a pre-review agent audit, count only generally available controls, and treat missing task-scoped grants and delegation tracing as gaps to close.
Fable 5.1 Cache Cut: Re-run Agent Cost Model
The Fable 5.1 cache-read cut is a decision trigger, not a blanket discount; measure cache-hit share before migrating.
Advertisement
Run this Git intake checklist before your coding agent touches an untrusted repo
Treat incoming repositories as hostile intake: disable executable Git config paths and pin patched agent versions before any index-refreshing command runs.
Run this plugin checklist before a Plugin4Shell-style swap runs code with your credentials
Treat every coding-agent plugin as self-updating code, verify the resolved commit, and lock the update path before it runs with your credentials.
Audit a Software-Factory Agent Before It Touches Your Repos
Verify autonomy, model routing, review gates, failure rates, rollback paths, and logs before giving a coding agent access to production repos.
Browser-Agent Rollout Checklist for Claude in Chrome
Set org access, domain limits, manual approval, and banned tasks before a browser agent becomes the default.
Build a DMCA Restoration Agent for 48-Hour Recovery
A production-ready DMCA agent turns takedown recovery into a gated evidence pipeline with mandatory human review and explicit false-claim failure modes.
Run This Agent Containment Checklist Before Production: Inventory, Permissions, Drift Alarms, and Incident Response
Treat local agent inventory and permission visibility as a containment control before production, not as a post-incident audit.
Keep Browser Agents From Clicking the Wrong Button After a UI Refresh
Stable anchors, visual assertions, and canary checks stop browser agents from taking the wrong action after a UI refresh.
AI Agent Workflow for 48-Hour False DMCA Recovery
A five-step agent workflow detects delisted URLs, verifies the complaint, assembles proof, drafts the counter-notice, and tracks index recovery.
Build a football-data agent that turns transfer-market noise into scout-ready alerts
A constrained pipeline turns raw transfer updates into scout-ready alerts: allowlist sources, dedupe events, and sign off before publishing.
Build a Read-Only Binance Inflow Monitor That Flags Risk and Never Executes
Build a read-only Binance inflow monitor with sandboxed inference, a risk-flag schema, a kill switch, and an audit log.
Production Agent Gate: Six Controls That Turn a Weekend Build Into an Auditable Operation
An agent is production-ready only when its permissions, spend, approvals, logs, rollback, and incident response are explicit and enforceable.
Sell AI agents without losing a billion: a unit-economics checklist
A vendor's loss stack shows why autonomy claims fail when projects, churn, and slow cash dominate.
Make Agent Goal Loops Ship: Gates, Retries, and Audit Trails
A production agent goal loop ships when success is a testable contract, not a model claim: define gates, retries, and audit trails before the run.
Contain Agent Swarms: A Five-Control Checklist
Agent swarms fail when identity, egress, and blast radius are missing, so operators need a minimum control set for tool-enabled agents.
Keep AI Marketing Agents From Citing Competitor Pricing as Yours: A Retrieval-Citation-Approval Control
Generation quality is not the risk. The risk is an agent pulling a competitor price, calling it yours, and shipping it before a human sees the source.
Secure AI Agents in Production: Replace Human Logins with Scoped, Revocable Agent Identities
Production AI workers need their own identities, task-scoped tokens, and revocable audit trails instead of borrowed human logins.
Audit, Scope, Verify, Hand Off: A Working Checklist for ChatGPT Work Tools and Skills
A five-step session checklist for work tools and skills: inventory, classify, scope, verify, hand off.
Ship a production agent by checking the harness: context, tools, memory, evals, traces, escalation
Before launch, verify context, tool contracts, permissions, memory, evals, traces, and escalation; after launch, review traces and update the failing control.