Field notes
Practical notes on AI-agent authority and security review.
Field Notes covers AI-agent authority, MCP, RAG, CI/CD agents, AgentBoundary, and lessons from technical reviews.
Overview
What you will read.
- AI-agent authority notes
- MCP and tool-use risk analysis
- RAG boundary observations
- CI/CD agent security notes
- AgentBoundary updates
- Post-incident review lessons
Email updates
Request Field Notes by email
Request occasional technical notes by email. Add a topic if you have a particular interest. You can request removal from the list at any time by emailing contact@tkoresearch.com.
01
Topics and approach
- How AI systems use permissions, retrieve data and call tools.
- Questions to ask when building, buying or changing an AI system.
- What is known, what remains uncertain, and when results depend on the system tested.
Related paths
Next step