ai-employee

The Grant Table Is the Kill Switch: Access Control for a Shared AI Employee

Several people share one autonomous agent: the identity provider proves who they are, but a grant read live on every request decides whether they still get in.

What an Agent May Do Is Not How It May Start

One authorization setting was answering two unrelated questions. Splitting exposure from initiation is what made the entitlement model enforceable.

Bake Every Author-Built Connector In, Keep It Inert Until Bound

When a vendor has no MCP server you author your own. The real decision is where that connector code lives: baked into one shared image, inert until bound.

An Agent That Can Edit Its Own Autonomy Ceiling Has No Ceiling

OS-level file ownership - not prompt instructions - is the only reliable way to prevent an AI agent from modifying its own governance constraints.

Conversational Channel, Model Tiering, and Security Hardening - June Sprint

Hardening an AI employee into a config-governed, safety-gated system

Moving agent fetch loops into a code-execution primitive

Going vendor-direct MCP first and retiring an aggregator default