AI Security

How a Mid-Size Financial Services Firm Rebuilt Their Multi-Agent Observability Stack After a Silent Tool-Poisoning Attack Went Undetected for 11 Days

AI Security

How a Mid-Size Financial Services Firm Rebuilt Their Multi-Agent Observability Stack After a Silent Tool-Poisoning Attack Went Undetected for 11 Days

On a Tuesday morning in late Q4 of last year, a senior platform engineer at a mid-size wealth management firm we'll call Meridian Capital Partners noticed something strange. A downstream compliance reporting agent had been silently appending a low-confidence disclaimer to a subset of client portfolio summaries. Not

By Scott Miller
How Enterprise Backend Teams Are Architecting Agent-to-Agent Trust Boundaries When Orchestrator and Subagent Models Come From Different Providers (And Why Implicit Trust Inheritance Is the Security Vulnerability Nobody Is Patching in 2026)

AI Security

How Enterprise Backend Teams Are Architecting Agent-to-Agent Trust Boundaries When Orchestrator and Subagent Models Come From Different Providers (And Why Implicit Trust Inheritance Is the Security Vulnerability Nobody Is Patching in 2026)

Imagine your enterprise has deployed a sophisticated AI orchestration layer. A GPT-class orchestrator model from one provider receives a high-level task, breaks it into subtasks, and dispatches those subtasks to specialized subagents: a code-generation model from a second provider, a data-retrieval agent hosted on a third, and a compliance-checking agent

By Scott Miller
7 Ways Enterprise Backend Teams Are Using MCP's Roots Specification to Enforce Filesystem and Repository Boundaries Across Multi-Agent Coding Workflows in 2026

Model Context Protocol

7 Ways Enterprise Backend Teams Are Using MCP's Roots Specification to Enforce Filesystem and Repository Boundaries Across Multi-Agent Coding Workflows in 2026

When Anthropic introduced the Model Context Protocol (MCP) as an open standard in late 2024, most of the early excitement centered on its Tools and Resources primitives. Engineers loved the idea of giving AI assistants structured, auditable access to external systems. But as enterprise adoption matured through 2025 and into

By Scott Miller
7 Predictions for How Enterprise Backend Teams Will Redesign Their Agentic Security Boundary Models as Multi-Agent Systems Cross Organizational Perimeters Into Third-Party Infrastructure by Q4 2026

agentic AI

7 Predictions for How Enterprise Backend Teams Will Redesign Their Agentic Security Boundary Models as Multi-Agent Systems Cross Organizational Perimeters Into Third-Party Infrastructure by Q4 2026

Something quietly seismic is happening inside enterprise backend stacks right now. AI agents, once safely contained within internal sandboxes and tightly scoped automation pipelines, are breaking out. Not maliciously, but by design. Multi-agent systems are being tasked with orchestrating work that naturally flows across organizational perimeters: pulling live data from

By Scott Miller
A Beginner's Guide to AI Agents That Take Action on Your Behalf: What Enterprise Backend Teams Need to Understand About Tool Use, Permissions, and Why "Just Let It Run" Is Never a Safe Default

AI Agents

A Beginner's Guide to AI Agents That Take Action on Your Behalf: What Enterprise Backend Teams Need to Understand About Tool Use, Permissions, and Why "Just Let It Run" Is Never a Safe Default

Not long ago, AI in the enterprise meant a chatbot answering FAQs or a model summarizing a document. The human was always in the loop, always clicking "send," always making the final call. That era is effectively over. In 2026, AI agents are writing code, querying databases, sending

By Scott Miller
How to Audit and Harden Your Enterprise AI Agent's Secret and Credential Rotation Pipeline Before Agentic Workflows Escalate Static API Keys Into a Full-Scale Secrets Sprawl Crisis

AI Security

How to Audit and Harden Your Enterprise AI Agent's Secret and Credential Rotation Pipeline Before Agentic Workflows Escalate Static API Keys Into a Full-Scale Secrets Sprawl Crisis

There is a security crisis quietly assembling itself inside your enterprise's AI infrastructure right now, and most security teams have not noticed it yet. As agentic AI workflows proliferate across organizations in 2026, a new and uniquely dangerous pattern has emerged: AI agents that autonomously call APIs, spin

By Scott Miller