{"clean-is-not-ready-to-spend":{"description":"A valid AI workflow can still waste money. Nika now separates legal files from workflows that are ready for a paid run.","file":"2026-08-21-clean-is-not-ready-to-spend.md","author":"Thibaut Melen"},"ci-without-ambient-authority":{"description":"Run Nika in CI and on headless servers with the same checked workflow bytes, explicit authority, deterministic rehearsals and a hard launch budget.","file":"2026-08-15-ci-without-ambient-authority.md","author":"Thibaut Melen"},"mcp-with-a-blast-radius":{"description":"An MCP tool is executable foreign capability. Put its server, network, environment, tool ids and schema pin under separate review, then let the trace record the call.","file":"2026-07-24-mcp-with-a-blast-radius.md","author":"Thibaut Melen"},"injection-goes-nowhere":{"description":"Prompt injection examples usually end with the agent taking a new action. Here the plan is authored before the model runs: the hostile note becomes data, never an action, and the boundary is checked before a token is spent.","file":"2026-07-08-injection-goes-nowhere.md","author":"Thibaut Melen"},"the-credentials-your-pipeline-breaks":{"description":"OpenAI and Google sign the images their APIs return. Almost every pipeline that touches those files silently converts the signature into evidence of tampering. That included ours, until this week.","file":"2026-07-06-the-credentials-your-pipeline-breaks.md","author":"Thibaut Melen"},"the-secrets-line":{"description":"Information-flow, audited before it flows: how the checker proves a secret cannot leak into a prompt, a file, or a host.","file":"2026-07-05-the-secrets-line.md","author":"Thibaut Melen"},"blast-radius-in-the-file":{"description":"The workflow declares its effect boundary before execution. Static checks explain the fit; runtime sinks enforce what the host can prove.","file":"2026-06-12-blast-radius-in-the-file.md","author":"Thibaut Melen"}}

the journal · by tag

Security

Every post filed under Security, newest first, one register of 7 the journal keeps. The shelf lens on the journal filters the same set in place.

7postsin this register
7tagsthe journal keeps
49posts in the journalall registers together
2026-08-21latestnewest first below

07Clean is not ready to spendA valid AI workflow can still waste money. Nika now separates legal files from workflows that are ready for a paid run.2026-08-21 · 6 min 06The CI job should know its boundaryRun Nika in CI and on headless servers with the same checked workflow bytes, explicit authority, deterministic rehearsals and a hard launch budget.retrospective · 2026-08-15 · 8 min 05MCP with a blast radiusAn MCP tool is executable foreign capability. Put its server, network, environment, tool ids and schema pin under separate review, then let the trace record the call.retrospective · 2026-07-24 · 6 min 04The prompt injection that goes nowherePrompt injection examples usually end with the agent taking a new action. Here the plan is authored before the model runs: the hostile note becomes data, never an action, and the boundary is checked before a token is spent.2026-07-08 · 3 min 03The credentials your pipeline was breakingOpenAI and Google sign the images their APIs return. Almost every pipeline that touches those files silently converts the signature into evidence of tampering. That included ours, until this week.2026-07-06 · 4 min 02The secrets lineInformation-flow, audited before it flows: how the checker proves a secret cannot leak into a prompt, a file, or a host.2026-07-05 · 3 min 01The blast radius is part of the fileThe workflow declares its effect boundary before execution. Static checks explain the fit; runtime sinks enforce what the host can prove.retrospective · 2026-06-12 · 3 min

The other registers: Engine · Sovereignty · Agents · Language · Manifesto · Origins. The whole journal →