Fail-closed authorization for AI agent tool calls, and the audit record behind it
Platform teams already enforce fail-safe defaults for Kubernetes objects with RBAC and admission controllers such as OPA/Gatekeeper and Kyverno. My preprint, Fail-Closed Authorization for Tool-Using A
Written by
Senior DevOps & AI Platform Engineer
Andrey Lesnikov is a Senior DevOps & AI Platform Engineer working on Kubernetes, GitOps, platform engineering and the security of tool-using AI agents. He is the author of the book "Prove It Before Production: Evidence-Driven Infrastructure Engineering for Kubernetes and GitOps" and of the preprint "Fail-Closed Authorization for Tool-Using AI Agents". He received the Cloud Native Rockstar Award 2026 (Company Award, 3rd place). More at justrunme.com.
Responses
Markdown supported · ⌘↵ to post
No responses yet.