Your AI agent asks for approval forty times a day. The first few you read carefully. You check the recipient, you skim the draft, you think about it. Somewhere around the tenth you stop reading and start clicking, and by the afternoon the dialog has become a keystroke — a muscle movement between you andContinue reading “The Margin Call Pattern: Budgeting Risk for Autonomous Agents”
Monthly Archives: September 2026
MCP Servers in the Enterprise: Identity, Policy and Blast Radius
A model summarising an incident for us once pulled the contents of a Kubernetes Secret into a transcript. Nothing was compromised. No attacker involved. The MCP server had been given a read-only role, somebody had written that role the way you write roles for humans — broad read across the API, because reading is harmlessContinue reading “MCP Servers in the Enterprise: Identity, Policy and Blast Radius”
