Writing
Infrastructure and security notes
Reliability and security share a root: defined boundaries, least privilege, and evidence you can audit.
Infrastructure, reliability, and security are usually discussed as separate concerns. In production systems, they share the same foundation: explicit boundaries and evidence you can inspect.
The overlap
A webhook handler that logs raw payloads is a reliability convenience and a security incident. A tool-calling agent without scoped credentials is an orchestration demo and an access-control hole. A memory store without tenant filters is a retrieval feature and a data breach.
What I want this series to cover later
- Secret handling in agent traces.
- Tenant isolation in retrieval.
- Supply chain and CI runner trust.
- What “eval data” is allowed to contain.