Author
Jonathan Haas
Founder · 27 posts
Previously founded ThreatKey (acquired), built security products at Vanta, and worked at Carta and Writer. Background in security, infrastructure, and developer tooling.
DeixicGitHub
- How we built an integration factoryEngineering · 8 min
- When a passing test runs the wrong codeEngineering · 4 min
- A screenshot is not a read-backAudit & compliance · 5 min
- CC6.2 is where first SOC 2 audits go sidewaysIdentity & access · 5 min
- What a 10-person company actually has to decide for SOC 2Approvals & policy · 5 min
- How we turned our coding agent into our own bugbotEngineering · 8 min
- Stopping a running agentOperations · 7 min
- Why service-account permissions don't fit agentsIdentity & access · 7 min
- NIST AI RMF and ISO/IEC 42001 for the agent runtimeAudit & compliance · 4 min
- The lethal trifecta: where it actually livesIdentity & access · 6 min
- Replay: reconstructing an agent action from the audit logAudit & compliance · 8 min
- Five things that keep breaking when AI agents move into productionOperations · 6 min
- Who owns the AI budget when one task crosses three teams?Cost · 4 min
- Designing approvals operators actually readApprovals & policy · 8 min
- Agent spend, before the invoiceCost · 3 min
- Discovery lag: how long before you find out what your agents did?Operations · 5 min
- Why we built our own agent sandboxEngineering · 5 min
- What an agent audit row should carryAudit & compliance · 7 min
- Policy at action time: what the gate evaluatesApprovals & policy · 8 min
- A 1-second submit hid a 30-minute outageEngineering · 6 min
- After the outage: making agent completion provableEngineering · 5 min
- Sub-agent identity: inherit and narrowIdentity & access · 7 min
- Finance needs an AI spend reconciliation before month-endCost · 4 min
- The model is not the institutionApprovals & policy · 5 min
- What the EU AI Act means for the agent runtime: an Article-by-article readAudit & compliance · 8 min
- Your AI coding agent is probably lying about its tests. It doesn’t know it is.Engineering · 3 min
- Controls that hold when the agent stops agreeingApprovals & policy · 3 min