Fail Closed AI Agent Guardrails: Why Empty Is Not Safe
An empty HOME migrated my real database. An empty git status force-deleted four worktrees. Five fail-closed rules for AI agent checks.
$ grep -r "#security" ~/blogs # my words, with labels
I tagged my opinions.
Even my tangents have an index. I made it easy to keep up.
$ ls ~/write/connections
my posts, connectedI have receipts for that.
3 posts
These are my #security posts. I made the connection; you get the links.
I Asked an AI Agent to Go Live. It Exposed My Server.
A live test of DeepSeek Harness, a self-hosted AI coding agent, shows what happens when an obedient agent is asked to expose a server, and why the firewall around it mattered more than the model inside it.
CVE-2026-63030: WordPress Pre-Auth RCE Explained
CVE-2026-63030 is critical, but automated exploitation fails on one overlooked detail that 70% of production sites already defend against.