Topics

AI agents turn language into actions. That makes identity, delegated authority, tool permissions, and execution integrity part of the security boundary—not implementation details. Start here Trust Is the Next Bottleneck explains why authorization alone cannot establish that an agent is running the expected code. AI Agents Have an Identity Crisis examines verifiable delegation across multi-agent workflows. MCP Is a Capability System provides the practical permission model. Hardening MCP Servers with Confidential Computing addresses the infrastructure trust boundary around tool credentials. Google’s AP2 Protocol applies these ideas to agent-initiated commerce. Together, these essays describe a security model built from bounded authority, measured execution, and evidence that survives every hop.

Confidential computing protects data while it is being processed. The interesting question is not whether a workload runs inside a trusted execution environment, but whether the complete path from measurement to attestation to secret release deserves trust. Start here WhatsApp’s Private Processing introduces confidential computing through a system operating at internet scale. What WhatsApp’s Trail of Bits Audit Teaches Us shows how real implementations can break the intended trust model. From “Trust Us” to “Verify Us” explores confidential AI inference and the next identity problem. TEEs in Crypto looks at hardware isolation as a pragmatic coordination layer. Follow the Data offers the broader architecture method behind the technology. These pieces move from the basic promise—protecting data in use—to the harder work of proving what is actually inside the trusted boundary.

Security becomes more useful when it shapes product decisions early. These essays connect architecture, customer value, and the judgment required to ship systems people can trust. Start here Follow the Data presents the five questions I use to make unfamiliar security architecture problems clearer. Making Security an Enabler explains how security teams can replace late-stage vetoes with early design partnership. From NFC Startups to Confidential Computing traces the career experiences behind that perspective. The AI Security Stack turns the ideas into an executive operating model. The common theme is simple: start with the asset and the user outcome, make the trust boundary explicit, and design controls that help the product move.