Anthropic published how they secure an AI-native software development lifecycle. Claude writes roughly 80% of the code merged there, so no control that depends on a human reading everything survives.
Accessible Ops is fourteen principles for infrastructure operations, written for the same pressure from the other end. Most of what Anthropic describes lands on rows in that list.
Their governing rule, the Principle of Least Agency, draws hard boundaries around what an agent can access and do rather than relying on what it is told. chant is partway there. chant build
imports your TypeScript and runs it, held safe only by lint rules. chant build --fold
reduces the source to a value without executing the module, and --sandbox
confines whatever falls back. Anthropic’s rule is a good argument for making fold the default.