Home / Read as a persona / Read the newsroom as Sam, the security lead

Read as a persona

Read the newsroom as Sam, the security lead

Where Sam starts

8 articles, the ones this persona is built on. The picks above start from them and move with what you read, keep and put out.

• Who are you protecting against? Draw the security line where the attacker is, not above it
  Before deciding how secure to be, name the attacker: a six-tier ladder, an air-gapped Mac mini read against it, and eight startups drawing their line.
• The ultimate insider: agents, the infrastructure that cannot hold them, and risk management that cannot keep up
  Agents, the infrastructure meant to contain them, and risk management run on spreadsheets are arriving at once, and together they are one scenario.
• Footprint and blast radius: what the agent actually did, and what it would have cost
  Footprint is what an agent actually did, read afterwards from logs and vault history; blast radius is what a row of its reach would cost the business today.
• Six agents, one inbox: what a real multi-agent setup taught me about access policies
  An access policy for an agent is only as real as its worst row: every rule in a real six-agent setup, graded by how it is enforced today.
• The investigation GitHub owes its customers: why a global outage of a platform the world deploys through deserves an aviation-style inquiry, and how the evidence could now be gathered
  A global GitHub Actions outage read the way aviation reads an incident: independent inquiry, near-miss reporting, second and third stories, vaults for the evidence.
• Why my agents do not run on my laptop: chat, Cowork and Code in the cloud, a vault as the shared drive, and the two walls an operating system has
  An OS has two hard walls, the kernel and the user; an agent on a laptop runs inside the one marked you, so the agents run in the cloud with a vault as shared drive.
• The identity we wanted to give the agents: a week of design, the line in Google's terms, and why login plus secrets is still too hard
  A week of designing identities for agents and users met Google's terms; what survived is a passkey-unlocked keyring and a gap nobody sells.
• Where is the why? A permission prompt asked me to decide, and kept the reason
  A prompt asked for a decision and kept the reason. Read through the policy, the law on uninformed consent, and the fixes that worked: put the why in the prompt.

How this link works

A persona is a reading list with a name, a set of topics and a graph. Opening this page adds Sam to your personas in this browser, marked as a visitor, and makes it the one you are reading as. Keep it to have it with your others, or remove it; what you have read as yourself is not changed. The persona is stored in this browser, on this device, not on a server.

Pages are priced in pence, against £5.00 of starting credit that is also kept in this browser, and the meter does not block a page when the credit runs out. How the meter works and why it is there.

Read as someone else

• Morgan, the founder · Building a company
• Rowan, the journalist · Where news came from and where it could go
• Kai, the AI builder · Making agents work day to day
• Jordan, the board member · How AI is changing the business and how to govern it

All the personas, with a link to copy for each.