Trust3 AI Labs
Research, tools, and techniques on securing AI agents, MCP, and enterprise data from build time to runtime.
The 3 Layers of Agent Enforcement: Where Your SSH Key Actually Leaks
TL;DR Scope is pro-code agents (Claude Code, Codex, Cursor, Cline) on a developer’s machine, not no-code platforms. Infrastructure controls don’t apply to…
Mark Castillo
·
August 17, 2026
Policy the Agent Reads Is Not Policy the Agent Enforces: Build-Time Configuration ≠ Runtime Enforcement
TL;DR Build-time configuration is the necessary starting point for agent security, but visibility into an agent’s config is not control over its…
Anish Menon
·
August 4, 2026