07 · Security¶
You are here: Security · Operator
Next: Threat model
Agents act, and that is the risk. This section is what to allow, and what a person should check before a message is sent, money is spent, or a file is deleted. It also covers the tools and middlemen you install. It does not include instructions for attacking a system.
| Path | Operator |
| Time | About 40 minutes |
| You need | Tools and MCP |
Pages¶
| Page | You leave able to |
|---|---|
| Threat model | Name what you are protecting and four ways it gets steered |
| Find, review, fix, retest | Describe a security agent as a review loop, including the Antigen post |
| Gateways and supply chain | Review a proxy or a skill pack before it touches keys or a repo |
A boundary¶
Warning
These pages stay at the level of assets, permissions, and review. They are not a guide to probing, exploiting, or bypassing controls. If a future source is an exploit write-up, distill the defensive lesson and leave the procedure out of the repo.
Practice¶
Review a gateway for a proxy, and unstick a loop when a run obeys text it fetched. Both stay at the level of checks and gates.
Continue¶
Map | Paths | Glossary | References