SOC 2 CC6 and ISO 27001 still assume humans — agents break the evidence model

SOC 2 CC6 / CC7 and ISO 27001 Annex A access controls were designed around human users: provisioned accounts, predictable sessions, and admin actions you can attribute to a person. AI agents break those operating assumptions. A token can be valid at consent time, then an agent chains tools and produces side effects the quarterly user-access review never sees. OAuth still answers "can this client…

dev.to ·2h ago

We haven't written up this one. Dev.to has the full story — the link below goes straight to it.

Read the original at dev.to →

More in Tech

Google Antigravity looks like an Android app, but your phone isn’t invited

We put Google Antigravity on a Pixel phone to see how far it would get.

2h ago ·androidauthority.com

Apple’s rumored smart display is coming this month, and it could challenge Google’s smart home lead

Coupled with HomePod mini 2 and Apple TV 4K, Apple's refreshed smart home lineup should give Google plenty to worry.

2h ago ·androidauthority.com

This Steam tool lets you fudge Nvidia DLSS 5 to easily work on PC games

Jealous of all those DLSS 5 gaming experiments? Conduct your own with this Steam tool which allows Nvidia's tech to work on PC games with no fuss.

2h ago ·techradar.com

Polymarket Trading Bots: How to Build the Decision Engine

Getting market data is easy. Deciding what to do with it is the difficult part. A Polymarket trading bot can connect to the API. It can stream market data. It can read an order book.

Polymarket trading bot uses API for market data
Decision engine normalizes market state for analysis
Engine compares model probability with market-implied probability

2h ago ·dev.to

5 Places Custom React Hooks Make Your Code Better

You add a search box to a page. A timer delays the search until the user stops typing. Then another page needs the same behavior. You copy the timer, the effect, and the cleanup.

useDebouncedValue hook delays component updates until input settles
custom hook maintains latest input and debounced values in state
updates only occur after set delay, avoiding expensive work on each keystroke

2h ago ·dev.to

Prototype hover, press and focus animation in SVG before you build the app

A mockup cannot tell you whether a button answers a press in 150 milliseconds or 600. You find out by using it. Building the real interaction means wiring state, routing and data first, so the cheap move is to prototype the motion on the screen itself, before the app exists. An SVG screen is a good place to do it.

Prototype hover, press, and focus animations in SVG before full app development
Use SVG element with CSS styling for button creation and state transitions
Test prototype in headless Chrome, note potential browser and device differences

2h ago ·dev.to