PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

assumptions_made

josephthacker.com | blog | #ai-security | #ai-agents | #llm | #agent-design | #metadata | #assumptions | #agent-communication | #ai-engineering
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Joseph Thacker pitches an assumptions_made metadata convention for AI agents to surface the assumptions underlying their outputs and decisions.
Published
Collected

Related coverage

tool · projectdiscovery.io
How Neo's Agent Architecture Evolved: From One Agent → Plan, Execute & Verify
Neo evolved from a sandboxed agent into a plan-execute-verify architecture with parallel subagents, driven by context, duration, and quality limits. Longest runs hit 14.7 hours and 2,398 tool calls.
blog · xbow.com
How Attackers Are Using AI & What Defenders Must Do
Attackers are running AI driven attack chains from recon to exploitation in minutes. Here’s what actually changed, and why defenders need AI pentesting to keep pace.
blog · projectblack.io
Bypassing EDR with Local AI
A pentest shows Claude refuses to build an LSASS dumper, but local DeepSeek and uncensored Qwen models produce a working XOR-encrypted minidumper, making AI-assisted EDR evasion nearly effortless.
blog · about.gitlab.com
What happens when vulnerabilities are discovered faster than you can fix them?
AI is changing how quickly vulnerabilities can be discovered and exploited. The next challenge is bringing that same speed to remediation and prevention
blog · hackerone.com
Measuring The Fix: How We Evaluate Frontier Models on Remediation Quality
HackerOne tested frontier models on security fix quality and found the judge mattered more than the model. See how CTEM remediation earns engineer trust.
blog · about.gitlab.com
Extend GitLab Duo Agent Platform into your business systems
Learn how to call a custom GitLab flow from Salesforce so every error arrives as a GitLab issue with root-cause analysis, ready to fix and deploy.
Back