+Intertrace Insights
Guides
Plain-language playbooks for the people who run AI programs: what to ask, what to build first, and how to show it works.
- Pieces
- 57
- Threat research
- 16
- Updated
- Oct 20, 2026
23 pieces · newest first
Guide11 min read
Approval fatigue: fewer asks mean more oversight, not less
Human approval for agents fails when people get dozens of identical prompts a day. The case for asking less: ask by consequence, turn repeated asks into scoped grants, remember only similar calls, budget approvals, and build screens a person can decide on in ten seconds.
Sam O.
Guide10 min read
Seen is not protected: six coverage states between discovery and enforcement
Read-only discovery produces a long list of AI assets and nothing gets safer. Six beliefs that keep the list from turning into protection, what is true instead, and the evidence each coverage state needs, from seen to verified protected.
Intertrace
Guide9 min read
OAuth connects the account. Policy governs the action.
An integration broker solves OAuth plumbing, but a connected account's scopes describe what the provider's API allows, not what your agent should do. Seven beliefs about brokered agent access that fail in practice, what the RFCs actually say, and the calls that test each seam.
Intertrace
Guide10 min read
Whose key is the agent using? The credential lifecycle from first grant to revocation
A dispatch agent loops at 2 a.m. and nobody can stop it without breaking four other jobs or waking the engineer whose token it uses. One incident, followed through identity, scoped grants, rotation, measured revocation and offboarding.
Intertrace
Guide10 min read
Coding agents need broad access. Production should not be part of it.
A coding agent inherits every credential your shell can reach, so a session that starts with a failing test can end at the production database. Seven controls that keep production out of reach, why each matters, and the test that proves it.
Intertrace
Guide10 min read
Your internal assistant answers anyone with anything in the index. Fix it before retrieval.
Internal RAG assistants leak because the index is built with an administrator's access and queried by everyone. The case for putting the permission check inside the retrieval query, the two strongest objections, and why caches, summaries and revocation belong to the same argument.
Intertrace
Guide10 min read
When the policy check fails: the questions to settle before agent enforcement goes down
What should an agent do when its policy service is slow or down? The questions a design review asks about timeouts, cached decisions, retries and streaming, answered: route a missing decision by consequence, bound the cache, and key retries to the intended action.
Intertrace
Guide10 min read
Measure agent security on two columns: the harm that got through and the work that got stopped
Agent security controls get blamed for broken workflows, and nobody can show whether they help. The case for measuring protection and friction on the same runs, pairing every attack case with a benign twin, and gating releases on both.
Sam O.
Guide11 min read
An incident response playbook for an agent that crossed its authority
When an agent does something it should not, nothing was hacked in the usual sense and the standard playbook finds nothing. One fictional incident, followed from discovery to restore through five steps mapped to NIST SP 800-61 Rev. 3.
Intertrace
Guide11 min read
The first 90 days of an agent security program: authority first, policy later
A 30/60/90-day plan for the security lead just made accountable for agents already in production: find every agent that can act, put controls outside the model on the two or three that matter, and prove each phase on a real agent.
Sam O.
Guide9 min read
What an AI security incident costs, and how to model one for an agent
IBM's 2026 benchmark puts the average breach at USD 4.99 million, but an agent incident costs what the agent did. One fictional refund agent, one attack, two cost outcomes, and a model you can fill in with your own numbers.
Intertrace
Guide8 min read
Shadow AI: your team already uses it, and a ban will not change that
Banning unapproved AI tools mostly moves their use out of sight. Five myths about shadow AI, from the chat tab to connected apps and unattended agents, and what to do instead: discover, decide tool by tool, and offer a faster sanctioned path.
Intertrace
Guide8 min read
What a board should ask about AI agents, and what good answers sound like
Seven questions a board can put to management about the AI agents the company runs, the strong and weak answers to listen for, and a one-page quarterly report management can fill in from real data.
Sam O.
Guide10 min read
Buying AI security: ten checks that separate real controls from theater
A buyer's checklist for AI security products: ten checks, why each matters and how to test it on your own agents, the claims to treat with suspicion, and a four-week proof of concept with a scorecard you set in advance.
Sam O.
Guide10 min read
Vendor agents in your systems: scope, logs and a kill switch that works
Vendors now ship agents that act inside your CRM, inbox and repositories with credentials you granted. The six decisions to make for each one, in order: identity, scope, contract, logs, a kill switch you control, and a clean exit.
Intertrace
Guide9 min read
What auditors ask about AI agents, and the evidence that answers them
Auditors and customer questionnaires now ask about AI agents. The six questions that come up, answered the way a reviewer tests them, how they map to SOC 2, ISO/IEC 42001 and the NIST AI RMF, and how to produce the evidence continuously.
Intertrace
Guide9 min read
Data residency for LLM traffic: where prompts go and how to keep them there
An in-region model endpoint settles one copy of a prompt out of six or more. Following one fictional EU insurer's claims assistant: map every copy, read provider regional terms down to the exclusions, and route by data class.
Intertrace
Guide10 min read
Due diligence for the AI features already inside your SaaS
The assistant your CRM, docs or helpdesk switched on last quarter is a new data path from a vendor you approved years ago. Six checks, with reasons and tests, from data path and training use to injection, logs and contract terms.
Intertrace
Guide9 min read
Why AI pilots stall at security review, and the kit that gets them through
AI pilots that impress in a demo often wait months in security review because nobody can say what the agent can touch or how it is stopped. The decisions to make before the review, in order, a six-part kit, and a ten-day path to approval.
Intertrace
Guide9 min read
An AI acceptable-use policy people will actually follow
AI policies fail when they list tools instead of data, prohibit without a route to yes, and contain clauses nothing checks. Six beliefs behind those failures, and the replacements: three lanes, one owner, expiring exceptions and evidence for every clause.
Intertrace
Guide10 min read
Guardrails developers won't route around: a checklist for the governed path
When an AI control is slower or more confusing than calling the model directly, developers switch to a personal key and the control protects nothing. A checklist for making the governed path the easiest one, with a test for each item.
Sam O.
Guide10 min read
Threat model an AI agent in one afternoon
Most agent threat models study the model and miss the credentials. This five-pass, four-hour method models authority instead: data flow, real permissions, consequence tiers, everyone who writes into context and failure tracing, ending in one page with named owners.
Intertrace
Guide11 min read
Nobody owns the agents: fixing AI accountability before the first incident
Agents are built by one team, run on another team's credentials and act in a third team's systems, so when one misbehaves nobody answers for it. A teardown of one such afternoon, then four fixes ending in one rule: no owner, no credentials.
Sam O.
+Stay current
New research, the week it publishes.
Subscribe with RSS, or email support@intertrace.ai with a topic you want covered. To see the controls in action, try the Simulation Lab or read the documentation.