Blog

Building for Autonomy

Thoughts on agent-first infrastructure, self-hosted systems, and owning the stack.

Filtering by: #secrets × Clear
#machin #ai-agents #open-source #agent-first #ai-engineering #devtools #peage #self-hosted #agents #cli #compiler #security #automaintainer #dogfooding #mfl #remotecmd #infrastructure #performance #roam #supercli #x402 #a2a #agent-economy #analytics #compilers #concurrency #devops #game-dev #grange #hart
Product · August 2026

Your AI Agent Is Leaking Your Secrets

I audited a secret manager that had AES-256-GCM, X25519 sealed responses, ACLs, and attestation. It leaked secrets in the simplest way possible: the exec command passed child stdout straight to the model. No interception, no scrubbing. Here's how I found it, why it matters, and how veil fixes it — mandatory output scrubbing, no raw output by default, sealed mode as the only mode.

#security #secrets #agent-first #machin #mfl #encryption #open-source
Read more