Urgent.News

What's breaking now, across thousands of outlets.

More in Tech

PO Matching Looked Like It Halved Unsafe Invoice Approvals Until I Checked Why

A LangGraph agent for Japanese invoices, killed with SIGKILL, pre-registered, and gated in CI. The headline gain from its last check turned out to be mostly routing, not detection.

  • PO matching reduced unsafe invoice approvals from 17.0% to 2.0%
  • Verification caught most errors, PO matching stopped one out of six wrong PO agreements
  • LangGraph agent had three versions, final one added duplicate checks and PO matching

Hardening an AWS EKS cluster: IRSA, NetworkPolicies, restricted Pod Security and Secrets Manager via CSI

A freshly created EKS cluster works, but it's permissive. Every pod can reach every other pod, workloads can run as root, and the easy way to give an application AWS access is to attach permissions to…

  • Implement IAM Roles for Service Accounts (IRSA) for least-privilege IAM role assumption
  • Use NetworkPolicies to enforce default-deny traffic within orders namespace
  • Utilize Secrets Store CSI driver to mount AWS Secrets Manager secrets as files

More from Friday 16 October →