--- title: "AffixIO (@affixio) | Hashnode" description: "Verification infrastructure for agents and APIs. Read the latest articles by AffixIO on Hashnode." url: "https://hashnode.com/@affixio" --- @affixio # AffixIO @affixio · United Kingdom · Joined September 2026 Verification infrastructure for agents and APIs [Website](https://www.affix-io.com/) ### [Workers learned ML-DSA on 1 October. The demo signs a greeting.](https://affixio.hashnode.dev/workers-learned-ml-dsa-on-1-october-the-demo-signs-a-greeting?utm_source=hashnode&utm_medium=feed) Cloudflare's new Web Crypto flag is a real primitive, it is opt-in, and it will sign whatever bytes you hand it. 6 min read · [affixio.hashnode.dev](https://affixio.hashnode.dev/workers-learned-ml-dsa-on-1-october-the-demo-signs-a-greeting?utm_source=hashnode&utm_medium=feed) [Oct 3](https://hashnode.com/posts/workers-learned-ml-dsa-on-1-october-the-demo-signs-a-greeting/6ac050a4f79fb217968c576a) ### [An approved MCP tool definition is not a forever allow](https://affixio.hashnode.dev/an-approved-mcp-tool-definition-is-not-a-forever-allow?utm_source=hashnode&utm_medium=feed) Pillar Security's Deadbugz write-up is a useful reminder for anyone wiring agents to Model Context Protocol servers. A malicious MCP server shipped under a harmless name, behaved like a text formatter 5 min read · [affixio.hashnode.dev](https://affixio.hashnode.dev/an-approved-mcp-tool-definition-is-not-a-forever-allow?utm_source=hashnode&utm_medium=feed) [1](https://hashnode.com/posts/an-approved-mcp-tool-definition-is-not-a-forever-allow/6abbcfe0f567119ea44d9904) [Sep 29](https://hashnode.com/posts/an-approved-mcp-tool-definition-is-not-a-forever-allow/6abbcfe0f567119ea44d9904) ### [MCP OAuth metadata is not a tool-call permission](https://affixio.hashnode.dev/mcp-oauth-metadata-is-not-a-tool-call-permission?utm_source=hashnode&utm_medium=feed) On 29 September 2026, The Hacker News covered a high-severity issue in the official Model Context Protocol Python SDK: a malicious MCP server could trick an affected client into handing over OAuth cre 5 min read · [affixio.hashnode.dev](https://affixio.hashnode.dev/mcp-oauth-metadata-is-not-a-tool-call-permission?utm_source=hashnode&utm_medium=feed) [Sep 29](https://hashnode.com/posts/mcp-oauth-metadata-is-not-a-tool-call-permission/6abb77eb9cded2c9039d048b) ### [Individually correct agent controls can still fail at the boundary](https://affixio.hashnode.dev/individually-correct-agent-controls-can-still-fail-at-the-boundary?utm_source=hashnode&utm_medium=feed) A stack of sound security pieces does not automatically make a sound agent. That is the uncomfortable claim in CONTINUITY, a September 2026 paper on composable LLM agent controls (arXiv:2609.05269). T 5 min read · [affixio.hashnode.dev](https://affixio.hashnode.dev/individually-correct-agent-controls-can-still-fail-at-the-boundary?utm_source=hashnode&utm_medium=feed) [Sep 28](https://hashnode.com/posts/individually-correct-agent-controls-can-still-fail-at-the-boundary/6aba7f1748f648c2afb0c3ef) ### [An agent kill switch without a signed spend receipt is incomplete](https://affixio.hashnode.dev/an-agent-kill-switch-without-a-signed-spend-receipt-is-incomplete?utm_source=hashnode&utm_medium=feed) DigiCert's AI Trust Manager, generally available in mid-September 2026, put a clean phrase into the industry conversation: every AI agent needs a kill switch. The product centres on AI Passports, poli 6 min read · [affixio.hashnode.dev](https://affixio.hashnode.dev/an-agent-kill-switch-without-a-signed-spend-receipt-is-incomplete?utm_source=hashnode&utm_medium=feed) [Sep 28](https://hashnode.com/posts/an-agent-kill-switch-without-a-signed-spend-receipt-is-incomplete/6aba28786141023a6d202746)