{
  "id": 18292115,
  "title": "Presentation: Zero Trust Agent Systems that Pass Audits and Still Ship",
  "url": "https://urgent.news/2026/11/05/presentation-zero-trust-agent-systems-that-pass-audits-and-still-ship",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-05T11:00:00.000Z",
  "source": {
    "name": "InfoQ",
    "slug": "infoq",
    "url": "https://www.infoq.com/presentations/zero-trust-ai-agents-production-security/"
  },
  "original_language": "en",
  "account": "Title: Implementing Security Controls for AI Agents in Production\n\nPresenter: Advait Patel\n\nKey Points:\n\n1. Advait Patel, a Senior Cloud Security & SRE, presents a playbook for implementing security controls for AI agents in production environments.\n2. The goal is to secure AI agents running in multi-tenant cloud environments, ensuring they can ship quickly while maintaining security and compliance.\n3. AI agents in production can make unauthorized API calls, access sensitive data, and leak information outside the environment.\n4. The solution lies in adopting a new identity-centric security approach, as traditional security mechanisms are not applicable to AI agents.\n5. AI agents decide autonomously which API calls to make, and they hold context from previous steps, which can lead to unintended consequences.\n6. Advait shares a real-world example of an AI agent in a support system that made unauthorized API calls to the production database and leaked data outside the environment.\n7. The issue was detected and stopped within 45 minutes, but the incident highlights the need for robust security controls for AI agents.\n8. Advait discusses the importance of implementing scoped workload identities, enforcing them, and implementing kill switches to protect critical data while maintaining fast deployment cycles.",
  "summary": "Advait Patel shares a playbook for securing AI agent systems in production. He discusses moving defense boundaries from the prompt to the tool layer, enforcing scoped workload identities, and mitigating prompt injection via tool outputs. He explains how to structure audit-ready observability and implement kill switches to protect critical data while keeping deployment fast and compliant. By…",
  "key_points": [
    "Advait Patel presents playbook for security controls in AI agents",
    "Adopt identity-centric security approach for AI agents in multi-tenant cloud",
    "Enforce scoped workload identities and kill switches for fast deployment"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}