
The Guardian denied both commands. It never read either one.
Part 3: an MCP tool reaches the ACS Guardian's rules only when it is declared in three places, and the denies for the missing ones look like protection.

Author profile
Cloud, AI & Security Engineer | Python, AWS & DevSecOps. Building open-source tools, exploring AI agents, breaking things in staging so I can fix them in prod. 🇮🇹
Browse the latest writing surfaced through DevArt.

Part 3: an MCP tool reaches the ACS Guardian's rules only when it is declared in three places, and the denies for the missing ones look like protection.

Part 2: a command typed with Claude Code's ! prefix reaches no hook, its output enters the model's context in plaintext, and after a deny the agent suggested it.

I ran Claude Code through an OWASP Agent Control Standard Guardian with a reduced double blind. Bash output got redacted. The Read tool never reached the Guardian.

Most of the bugs that taught me something weren't crashes. The system worked, the checks were green,...

TL;DR Bifrost LiteLLM (4 workers) p50 at 100 RPS 1.01 ms 5.84 ms Success rate at 1,000...

Four test files in my site's repo import TypeScript directly. faq.test.mjs pulls in src/lib/faq.ts,...

On 1 September at 10:57 UTC the monthly ingest ran. It opened issue number 3 of the magazine, picked...

The Content Security Policy on this site allows scripts by SHA-256 hash. Not unsafe-inline, not a...

This post is my submission for DEV Education Track: Build Apps with Google AI Studio. What...

I ran a penetration test on my own infrastructure last week. No Burp Suite, no exploit fired at...

Every article I write lives on my own site first. A copy goes up on dev.to a day or two later, and...

This is a submission for DEV's Summer Bug Smash: Smash Stories powered by Sentry. I maintain a small...

This is a submission for DEV's Summer Bug Smash: Clear the Lineup powered by Sentry. ...

In early August Cloudflare sent me a congratulations email. The site had passed ten thousand...

I have a scraper that watches ten sites I consider adjacent to my work. It has been running since...

There is a job in my CI called judge. It reads the monthly issue my content pipeline writes, scores...

My job-search tool had five functions whose only purpose was fixing JSON that Claude had just...

My portfolio has a section that runs curl -I on itself while you watch. Not a screenshot of headers I...

I sat down one afternoon with a list of six things I wanted to ship to JobSearch, the job hunting...
Advertisement