The API call hasn't run. Can you still cancel?
Withdrawing approval can be too late before an agent's API call runs. A finding from my approval lab explains what a Cancel button needs to account for.
AI / AGENTIC SECURITY
Security for AI
systems that act.
Agents can read, decide, and change things. I investigate the permissions, boundaries, and evidence that keep those actions accountable.
Allowed. The action stays inside the approved workspace.
Latest article
AI accessibility
When an AI feature makes someone’s task harder
Can someone relying on your AI description make an informed choice? Follow one membership comparison from a missing term to a usable correction.
Read article ↗
More from the journal
The agent completed the task. Did it have permission?
A correct refusal can deserve a pass. A completed task can hide an unauthorized route.
A security finding exists. Who actually received it?
A message reaches the security queue. Its evidence link says “Access denied.” Decide what counts as a successful handoff and who owns the gap.
What my coding agent’s paper trail taught me about permissions
The keychain command was stopped. The workflow overwrite ran. Both changed how I handle agent access.
The AI Insurance Coverage Gap Coming to Canada
Your AI exposures are being quietly excluded from liability policies on the other side of the border—and Canadian insurers are taking notes. If you've been following the real estate commission wars, you know how this story goes: The United States has a massive market disruption (the NAR
Integrating DSPM with ISO 42001 and AI Governance Frameworks
ISO 42001 AI Management System requires continuous data security monitoring that traditional tools can't provide. DSPM platforms operationalize ISO 42001 requirements for data governance, risk assessment, and compliance evidence across AI systems.
The Billionaire Privacy Paradox: Why We Trust Our Most Intimate Data with People Suing Each Other
We trust billionaires with our most sensitive data while they publicly sue each other. Explore the uncomfortable truth about privacy, power, and protection in the AI age. Elon Musk and Sam Altman, two billionaires who co-founded OpenAI together, are now locked in a $134 billion lawsuit...with each accusing
DSPM vs Traditional Data Security: Why AI Changes Everything
Data Security Posture Management (DSPM) addresses the reality that AI systems access data across distributed environments, making static security controls insufficient. Practical comparison of DSPM vs traditional tools with real-world AI security scenarios.