Skip to content

Insights

Field notes from inside the boundary

Field notes on agents, identity, and shipping inside the federal boundary. Commentary from 20 years of mission engineering across DoD, DHA, SSA, and CMS.

Latest

RSS feed →

  • Dayel Ostraco

    The Agent Can't Run That Command. That's Least Privilege.

    Least privilege at the OS layer is not a posture. It is a list. A deny-by-default command allow-list that scopes what an agent may run, the layers that enforce it, and the escalation paths it forecloses.

    • ai
    • agents
    • cyber
    • least-privilege
    • nist
    • federal

    Read the post

  • Dayel Ostraco

    The CLI Is the New API. Govern It Like One.

    For an agent, the command line is a first-class invocation surface. It now needs what every API already has: a stable contract, structured output, authorization per call, and audit. Here is the gap I keep finding, and how to close it.

    • ai
    • agents
    • cli
    • api
    • governance
    • federal

    Read the post

  • Dayel Ostraco

    Agents Are Just Identities. The Boundary Hasn't Moved.

    Federal IT already owns every primitive an agent needs: identity, authorization, lifecycle, audit. The new work is governance at machine speed, not a new IAM tier. Most of what the agent-platform market is selling is a layer you do not need.

    • ai
    • agents
    • ato
    • federal
    • identity
    • iam

    Read the post