21:00
We let an AI agent execute Bash and lived to talk about it — Sarah Sanders, PostHog
Sarah Sanders describes auditing PostHog's Wizard and building Warlock, a deterministic scanner for agent inputs and outputs. She emphasizes restrictive tool permissions, protecting secrets, scanning the context supply chain, separating detection from enforcement, and keeping LLM triage advisory. Reported findings included subagents seeking secrets and…
Sarah Sanders