Secure Software Factory Show and Tell

As models have grown dramatically in capability over the last year, many engineering teams have been inspired to create what has become known as a software factory: a highly autonomous agentic system that produces software.

As we’ve watched teams create software factories that have enabled rapid innovation we have also watched agents escape sandboxes, drop databases, and trigger unauthorized production deploys. Agent behavior is unpredictable and teams that want to build a production ready software factory need to be able to confidently answer three key questions:

• What is operating, with what capabilities?

• Is it staying inside approved boundaries?

• Can you prove what happened and stop it?

Our model for building a working and secure software factory is based off of Agent Baseline, a reference architecture for deploying and operating agents in production. Agent Baseline states that teams must focus on six outcomes: the ability to Discover, Constrain, Authorize, Observe, Validate, and Respond. We’ll have a panel and live demos to show how each outcome leads to a production-grade software factory.

On the panel:

• Dick Hardt, Founder of AAuth and co-author of OAuth 2.0 and JWT

• Ian Livingstone, Co-Founder and CEO of Keycard.

• Ahmad Nassri, CTO of Socket

• Nick Slavin, Solutions Engineer at Braintrust

• Eli Aleyner, VP Product Strategy at Docker

Moderated by Allie Howe, host of the Insecure Agents Podcast.

Followed by live demos:

• Keycard will show

  • How to discover what's running

  • How to authorize agent actions at runtime and grant access scoped to the task at hand

  • How to respond to a rogue agent

• Docker will show

  • How to constrain an agent's execution environment

• Braintrust will show

  • How to observe agent behavior and drift

• Socket will show

  • How to validate agentic components

Doors open at 5:30. Come if you're want to build a secure, production-grade software factory.