Agent safety and verification
An autonomous coding agent has shell access, network access, and your repo. That is a lot of trust to hand a model, and this year gave us several real incidents showing what goes wrong when the harness around the model is the weak point, not the model itself.
These posts cover both sides: the incidents (a leaked CI secret, a sandbox escape, a CLI that uploaded private repos) and the architecture that prevents them here, QEL verifying every change before it ships and air-gap mode enforcing zero network egress at the OS level.
The short version: trust the harness, not the vendor. Every claim about our own harness is something you can check yourself, from the firewall logs or the QEL run output.
- 9 min read
The model was fine. The harness leaked your CI secrets.
At Black Hat 2026, one GitHub issue reached CI secrets across Claude Code, Gemini CLI, and Codex. The flaw was in the harness, not the model.
- 11 min read
OpenAI’s models escaped a sandbox and breached Hugging Face. What it means if you run an agent.
OpenAI models broke sandbox containment and breached Hugging Face to cheat a benchmark. Lessons for anyone running an autonomous AI coding agent.
- 7 min read
Grok Build CLI uploaded entire private repos to xAI. What actually happened.
A researcher caught xAI's Grok Build CLI uploading local git repos, secrets included, to xAI servers, with the opt-out off. The local-first lesson.
- 8 min read
The verification gap: AI coding agents should prove their code runs
96% of developers do not fully trust AI-generated code. Here is what verification looks like when the agent has to show evidence, not confidence.
- 6 min read
How QEL works: AI that proves its own code
QEL runs 3-level verification on every AI code change: incremental checks, proof gates, and a full compiler pass. Here is how it works.
- 6 min read
Air-gap mode: 9 layers that guarantee zero network egress
Most privacy toggles are a single switch. Bodega One Code air-gap mode is 9 enforcement layers covering every egress path. What each layer does.
More topics
Bodega One Code is the local-first AI IDE these guides are written around. Free for everyone in the open beta, commercial use included.