11 min read
Audit evidence a verifier can check offline
How a hash-chained ledger with per-event Ed25519 signatures and OSCAL export produces audit evidence an external verifier can confirm independently.
- audit
- ledger
- OSCAL
- Ed25519
- compliance
Writing
Notes on operating AI on real infrastructure
Practical, vendor-neutral writing for the platform, DevOps and security teams who run the infrastructure AI agents touch — the access map, least-privilege drift, audit and self-hosted governance.
10 min read
Governing MCP servers with RFC 9728 and RFC 8707 — what actually works
Trace the OAuth 2.1 flow MCP mandates after a protected server returns 401, what RFC 9728 and RFC 8707 provide, and the security pitfalls.
- MCP
- RFC 9728
- OAuth
- security
8 min read
Ephemeral credentials for Claude Code with workload identity federation
Static API keys never expire, share identity, and silently shadow federation. WIF replaces them with attested JWT exchange for short-lived per-session tokens.
- WIF
- ephemeral-credentials
- Claude Code
- workload-identity
8 min read
Inside the hooks PEP: deny-closed policy inside Claude Code
How a PEP classifies every Claude Code hook event into gating, context, or observe, wires the correct output schema per event, and deny-closes unknown events.
- Claude Code
- hooks
- policy-as-code
- deny-closed
9 min read
Permitted vs observed: drift as a first-class finding
Drift between what an AI agent is permitted to do and what it is observed doing becomes a structured, classified finding with confidence levels.
- least-privilege
- drift
- access-map
- observability
9 min read
Self-hosted governance next to the Claude apps gateway: a co-deployment guide
Anthropic's apps gateway handles OIDC auth for Claude. Your estate is more than Claude. This is the co-deployment architecture that governs both paths.
- self-hosted
- Claude
- co-deployment
- architecture
6 min read
What your AI agents can actually reach: mapping agent access on real infrastructure
An AI agent holds credentials, is permitted some actions, and is observed doing others. The access map shows the gap — and where least-privilege quietly broke.
- agent-access
- least-privilege
- observability
- audit
6 min read
Auditing Claude Code and MCP servers in self-hosted environments
Build an auditor-grade trail for Claude Code and MCP servers without leaving your perimeter: per-agent identity, a hash-chained ledger, untrusted MCP signals.
- MCP
- Claude Code
- audit
- self-hosted
6 min read
Least-privilege drift: catching over-privileged AI agents before an incident
How to spot least-privilege drift in AI agents by comparing permitted access with observed behavior and enforcing policy at access time.
- least-privilege
- ai-agents
- policy-as-code
- audit
6 min read
Self-hosted AI governance and data residency: the strongest GDPR story
Why self-hosting an AI platform is the strongest data-residency posture under GDPR: the governance tool never receives your data. Edges, not payloads.
- data-residency
- gdpr
- self-hosted
- ai-governance
6 min read
Passive discovery vs proxies: inventorying AI agents without sitting in the data path
Two ways to see your AI agents: an inline proxy with high blast radius, or passive discovery from logs, OpenTelemetry and an eBPF backstop. An honest tradeoff.
- passive-discovery
- observability
- eBPF
- least-privilege