"Shall We Approve?" Consequence-Aware Approval for Autonomous Coding Agents

Coding agents increasingly rely on automated approvers to decide whether a proposed shell command may run. Existing approvers, from rule-based checkers to guardrail models and deployed permission classifiers, base their decisions on the text of the request and command. Yet a command's behavior...

The Secure Software Factory: A Reference Architecture

The Secure Software Factory: A Reference Architecture is a 26-page whitepaper outlining a security framework for AI-driven software development environments. It describes how organizations can safely deploy autonomous coding agents by enforcing four security boundaries: sandbox isolation, network...

Tracekit: Tamper-Evident Intent-Reasoning-Action Auditing for Autonomous Coding Agents

Autonomous coding agents read untrusted files, run shell commands and spawn sub-agents with little supervision, yet their record is usually an editable log. We present Tracekit, an open-source, dependency-free system that captures three channels for every agent session: what the human asked inten...

When Developer Aid Becomes Security Debt: a Systematic Analysis of Insecure Behaviors in LLM Coding Agents

LLM-based coding agents are rapidly being deployed in software development, yet their security implications remain poorly understood. These agents, while capable of accelerating software development, may inadvertently introduce insecure practices. We conducted the first systematic security...