The EU AI Act after the AI Omnibus: the dates that changed
The AI Omnibus moved the EU AI Act's high-risk deadlines and simplified AI literacy. The new dates, what enforcement looks like, and what to do now.
3 min read
Blog tag
#Security
Threats, controls and secure design for AI tools and the systems they touch.
Sandboxing coding agents: what the built-in sandboxes do and don't cover
Claude Code and Codex both ship operating-system sandboxes for agent commands. What they restrict, what runs outside them, and settings worth enforcing.
4 min read
MCP servers keep trusting the wrong URLs: what recent advisories show
Advisories from Splunk, AWS, Google and the Rust MCP SDK share one pattern: a tool builds a request or command from input it shouldn't trust.
Write guardrails that keep secrets and personal data out of prompts
Add two or three SpanDock guardrails for secrets, personal data and your own patterns, enforce them on every computer, and check that they work.
When model output becomes code: three agent framework advisories from October
Flowise, Langflow and PraisonAI fixed flaws where prompt injection led to code execution. The shared mistake, and what to check in your own agents.
4 min read
Set up the MCP gateway and choose your first connectors
Give every computer's AI tools one governed MCP server: add two or three connectors read-only, set permissions and approvals, and check it works.
5 min read
The stateless MCP specification: what changes for teams running MCP servers
MCP 2026-07-28 drops sessions, adds routing headers, hardens authorisation and deprecates features. What platform and security teams need to plan for.
5 min read
Browse by tag
- #Security (55)
- #Agents (41)
- #AI coding tools (38)
- #LLM costs (23)
- #MCP (16)
- #Evaluation (14)
- #Observability (12)
- #Compliance (11)
- #Enterprise (9)
- #Platform engineering (9)
- #Data privacy (8)
- #DevOps (7)
- #Model routing (7)
- #Open-weight models (7)
- #Research (7)
- #Tutorials (6)
- #Code review (4)
- #Developer productivity (4)
- #Guardrails (4)
- #Networking (4)
- #OpenTelemetry (4)
- #Budgets (3)
- #Prompt engineering (3)
- #Self-hosting (3)
- #MCP gateway (2)
- #Release notes (2)
- #Skills (1)
- #Testing (1)