Security
Articles tagged Security — notes and deep-dives grouped under this topic.
-
Drift detection in 2026: from the alert to remediation as code
Plan says “no changes” while a security group sits open to the internet. The four blind spots of single-layer detection, and where automatic remediation should stop.
-
CSP behind a consent gate: why a green header proves nothing
The evaluator flagged two errors and both turned out to be dead entries. The real defect surfaced only once the check ran against browser behaviour instead of the header.
-
Production Dockerfile: distroless, build cache and secrets
A checklist of about ten lines: what ships to production and what stays in the builder stage. Measured base images, BuildKit cache mounts, secrets that never reach a layer and attestations that arrive on their own.
-
Agentic AI Security: Porting Enterprise Patterns Down to a Solo Harness
Biswas's architecture handles the identity layer well via OAuth and token exchange — but the real danger lives on the intent layer, which the article never reaches.