Agent Baseline Publishes Security Reference Architecture for Software Factories

Summary

Agent Baseline published The Secure Software Factory: A Reference Architecture, co-authored by Socket CTO Ahmad Nassri with contributors from Docker, Keycard, Barclays, and Secure Theory. The paper treats coding agents as untrusted and enforces four boundaries (sandbox, network, supply chain, and identity and access) from infrastructure the agent cannot configure or reach.

Mitigation

The reference architecture enforces limits outside the agent: the agent proposes, policy authorizes, and infrastructure enforces. Supply chain controls use an admission point such as a registry or supply chain firewall that serves only approved versions, and an egress proxy the agent cannot reconfigure that allows only approved destinations.

Related items

• LowFBI arrests Saudi OpenAI employee who allegedly planted recording device in conference roomSimilar attack · CNBC Technology
• MediumVisual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572)Similar attack · Embrace The Red
• LowAnthropic warns self-replicating AI could spread to your smart devicesSimilar attack · BleepingComputer
• InfoAnthropic Warns Small AI Models Could Soon Form Self-Propagating IoT BotnetsSimilar attack · The Hacker News
• MediumWhen LLM Gateways Go Wrong: Findings from LiteLLMSimilar attack · Check Point Research