Articles tagged #spiffe
2 articles
AI agentssecuritySPIFFE
The agent gets an identity, not a key
Per-invocation brokering solved possession. SPIFFE workload identity attacks the credential itself: short-lived, attested, rotating. See it run live on July 28.
Jul 27, 20266 min read
AI agentssecuritySPIFFE
On July 28, we attack our own agent. Live.
A live attack attempt against a running nono deployment: SPIFFE workload identities brokered per invocation, tamper-evident audit, and what an attacker actually gets.
Jul 21, 20262 min read