---
title: "Andrey Lesnikov (@justrunme) | Hashnode"
description: "Senior DevOps & AI Platform Engineer. Read the latest articles by Andrey Lesnikov on Hashnode."
url: "https://hashnode.com/@justrunme"
---

@justrunme

# Andrey Lesnikov

@justrunme · Germany · Joined November 2026

Senior DevOps & AI Platform Engineer

[Website](https://justrunme.com/)

### [Fail-closed authorization for AI agent tool calls, and the audit record behind it](https://justrunme.hashnode.dev/fail-closed-authorization-for-ai-agent-tool-calls-and-the-audit-record-behind-it?utm_source=hashnode&utm_medium=feed)

Platform teams already enforce fail-safe defaults for Kubernetes objects with RBAC and admission controllers such as OPA/Gatekeeper and Kyverno. My preprint, Fail-Closed Authorization for Tool-Using A

7 min read · [justrunme.hashnode.dev](https://justrunme.hashnode.dev/fail-closed-authorization-for-ai-agent-tool-calls-and-the-audit-record-behind-it?utm_source=hashnode&utm_medium=feed)

[1h ago](https://hashnode.com/posts/fail-closed-authorization-for-ai-agent-tool-calls-and-the-audit-record-behind-it/6af6ec76f8d8584368c29d20)