{"slug": "your-agents-are-isolated-your-shared-state-isn-t", "title": "Your agents are isolated. Your shared state isn't.", "summary": "AgentReceipts.ai identified a critical isolation gap in multi-agent deployments: while agents run in separate git worktrees, shared resources like secret stores remain accessible to all, breaking isolation. The company proposes using kernel-attested OS user identities to reconstruct cross-agent action graphs, though some shared resource edges remain unmapped.", "body_md": "I ran three agents on a deploy, each in its own isolated git worktree. None of them could see the others' files. All three still wrote to the same secret store, because the store wasn't inside any of their worktrees.\n\nA worktree fences an agent's working tree. The database it writes to and the API it calls live outside that fence, and when two agents touch the same resource out there, isolation can't see that it happened.\n\nSigning each action doesn't distinguish much on its own, since most audit tools already do it. The harder problem is reconstructing, from separately signed per-agent chains, a graph of which agents touched which shared resource and in what order. A single-actor sandbox only sees one process, and a flat audit log records actions without linking them across agents.\n\nThe full post walks through one real receipt: which agent acted, under whose authority (a kernel-attested OS user rather than a self-declared label), and what signed it. It also gives an honest account of what the graph can't show yet, including which shared resources draw edges today and which don't.\n\nRead the full post (canonical):\n\n[https://agentreceipts.ai/blog/attribution-over-undo/](https://agentreceipts.ai/blog/attribution-over-undo/)", "url": "https://wpnews.pro/news/your-agents-are-isolated-your-shared-state-isn-t", "canonical_source": "https://dev.to/ojongerius/your-agents-are-isolated-your-shared-state-isnt-16g9", "published_at": "2026-06-14 12:15:51+00:00", "updated_at": "2026-06-14 12:40:47.644494+00:00", "lang": "en", "topics": ["ai-agents", "ai-safety", "ai-infrastructure", "developer-tools"], "entities": ["AgentReceipts.ai"], "alternates": {"html": "https://wpnews.pro/news/your-agents-are-isolated-your-shared-state-isn-t", "markdown": "https://wpnews.pro/news/your-agents-are-isolated-your-shared-state-isn-t.md", "text": "https://wpnews.pro/news/your-agents-are-isolated-your-shared-state-isn-t.txt", "jsonld": "https://wpnews.pro/news/your-agents-are-isolated-your-shared-state-isn-t.jsonld"}}