当AI代理无法自证身份，网站只能在封锁与信任间艰难选择，这篇剖析了背后安全困境的硬核技术文值得一读。
A site that wants to let an AI agent act has a problem it rarely says out loud. It cannot tell which agent is actually at the door. A user-agent strin…
用模块化预训练实现AI能力访问控制，破解双重用途困境，确保可靠部署。
arXiv:2607.08077v1 Announce Type: new Abstract: AI developers face a dual-use dilemma. An AI capability that helps one user cure a disease can help an…
一个支持RBAC的自托管LLM网关与功能丰富的聊天UI开源项目，方便企业安全地管理和部署大模型交互。
Article URL: https://github.com/croit/llm-gateway Comments URL: https://news.ycombinator.com/item?id=48800955 Points: 4 # Comments: 0
防止AI代理泄露敏感信息，关键在于不给它们不必要的机密权限，提升RAG系统安全性。
Some time ago, I reviewed an AI agent implementation and found an API key in the system prompt. The developer didn't realize it, but the LLM did. LLMs…
LLM-Agent能否主动遵守访问拒绝信号？本论文设计测量框架，附Kubernetes适配器与实验代码，填补AI安全合规空白。
arXiv:2606.06460v1 Announce Type: cross Abstract: As autonomous LLM agents increasingly hold real credentials and operate infrastructure without a hum…
解决AI Agent提示词中繁琐的访问控制集成问题，提供简洁、标准的解决方案
Article URL: https://github.com/yaodub/cast Comments URL: https://news.ycombinator.com/item?id=48383471 Points: 4 # Comments: 1
OpenAI揭秘如何为Windows上的Codex打造安全沙箱，确保编码代理高效且受控运行。
Learn how OpenAI built a secure sandbox for Codex on Windows, enabling safe, efficient coding agents with controlled file access and network restricti…
OpenAI揭秘如何用速率限制、使用追踪与积分体系构建Sora和Codex的持续访问系统
How OpenAI built a real-time access system combining rate limits, usage tracking, and credits to power continuous access to Sora and Codex.
Vercel 正式将域名管理从账户级迁移至团队级，简化协作、权限与统一计费。现有账户域名仍可用，但任何改动必须先转移到团队，开发者务必留意这一平台策略变更。
Managing domains at the account level is no longer supported. Domains must now be managed at the team level, which simplifies access control, collabor…