OWASP's secure-coding guidance now explicitly recognizes that agentic coding tools can edit files, run shell commands, install packages, access networks, and interact with development environments, an…
Enterprises need runtime authorization — not prompt filtering alone — to govern shell commands generated and executed by autonomous AI agents, according to an analysis by Henry Thomas. The proposed mo…
Henry Thomas explains that AI governance and AI runtime enforcement are distinct concepts, with governance defining policies and runtime enforcement applying them at the moment an AI agent attempts an…
Oconee Runtime, a new open-source project by Henry Thomas, provides policy enforcement for browser AI and coding agents, addressing the shift from prompt-based AI to agentic systems that execute actio…
Oconee Runtime, a provider of runtime enforcement for AI agents, introduced a three-level governance model—Allow, Warn, or Block—to manage AI agent actions beyond initial prompts, addressing risks fro…
Prompt filtering alone is insufficient to secure AI coding agents, according to OWASP guidance and security expert Henry Thomas, because these agents can execute commands, modify files, and access API…