{"data":{"id":"fd865aeb-dae2-41cb-b32d-d30a0317b782","title":"Agent Baseline Publishes Security Reference Architecture for Software Factories","summary":"Agent Baseline published The Secure Software Factory: A Reference Architecture, co-authored by Socket CTO Ahmad Nassri with contributors from Docker, Keycard, Barclays, and Secure Theory. The paper treats coding agents as untrusted and enforces four boundaries (sandbox, network, supply chain, and identity and access) from infrastructure the agent cannot configure or reach.","solution":"The reference architecture enforces limits outside the agent: the agent proposes, policy authorizes, and infrastructure enforces. Supply chain controls use an admission point such as a registry or supply chain firewall that serves only approved versions, and an egress proxy the agent cannot reconfigure that allows only approved destinations.","labels":["security","research"],"sourceUrl":"https://socket.dev/blog/agent-baseline-software-factory?utm_medium=feed","publishedAt":"2026-10-13T17:54:48.146Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["other"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["AI coding agents","Uber agents","Stripe Minions","Vercel AI SDK factory"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-13T17:54:48.146Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}