DEV Community

Imran Siddique profile picture

Imran Siddique

CPO, Opaque Systems | Agent Governance & Confidential Computing | Creator, Agent Governance Toolkit | ex-Microsoft Azure

Location Bellevue, WA Joined Joined on  Personal website https://imran-siddique.github.io/ github website twitter website
Two caps, two enforcement points
mosiddi profile

Two caps, two enforcement points

#agentsecurity #mcp #enforcement
Comments
4 min read

Want to connect with Imran Siddique?

Create an account to connect with Imran Siddique. You can also sign in below to proceed if you already have an account.

Create Account
Already have an account? Sign in
The evidence standard that needs a gate to count
mosiddi profile

The evidence standard that needs a gate to count

#agentsecurity #standards #enforcement
Comments
4 min read
Every control plane writes the log that describes its own behaviour
mosiddi profile

Every control plane writes the log that describes its own behaviour

#aigovernance #mcps #attestation #agents
Comments
5 min read
Five Docker Sandboxes CVEs this year, all in the doors
mosiddi profile

Five Docker Sandboxes CVEs this year, all in the doors

#agentsecurity #sandboxing #enforcement
Comments
5 min read
Agent Mesh: what it assumes about your agents
mosiddi profile

Agent Mesh: what it assumes about your agents

#aigovernance #cryptography #identity #attestation
Comments
5 min read
Verified, with nothing hashed
mosiddi profile

Verified, with nothing hashed

#agentsecurity #mcp #evidence
Comments
4 min read
Every Dependency Is a Promise Your System Has to Keep
mosiddi profile

Every Dependency Is a Promise Your System Has to Keep

#architecture #machinelearning #artificialintelligen
Comments
3 min read
One repository answered the same question twice on 11 September
mosiddi profile

One repository answered the same question twice on 11 September

#agentsecurity #mcp #sql
Comments
4 min read
The alias check I wired up was bypassed in September 2025
mosiddi profile

The alias check I wired up was bypassed in September 2025

#attestation #sevsnp #evidence
Comments
5 min read
Deep-dive: how the public TRACE Registry is built to be distrusted
mosiddi profile

Deep-dive: how the public TRACE Registry is built to be distrusted

#compliance #traceability #euaiact #nistframework
Comments
9 min read
The authentication fix that changed no authentication
mosiddi profile

The authentication fix that changed no authentication

#agentsecurity #cve #computeruse
Comments
4 min read
Your trace knows what the agent did. It does not know what you allowed.
mosiddi profile

Your trace knows what the agent did. It does not know what you allowed.

#opentelemetry #agents #aigovernance #observability
Comments
5 min read
The release forbade the swap and left the signal opt-in
mosiddi profile

The release forbade the swap and left the signal opt-in

#mcp #agentsecurity #specreview
Comments
5 min read
The fix shipped three weeks before the bug had a name
mosiddi profile

The fix shipped three weeks before the bug had a name

#agentsecurity #supplychain #codingagents
Comments
4 min read
The finding was correct and eight weeks late
mosiddi profile

The finding was correct and eight weeks late

#attestation #tls #specreview
Comments
4 min read
What your agent can prove after the second hop
mosiddi profile

What your agent can prove after the second hop

#confidentialcomputin #agents #cryptography #cybersecurity
Comments
6 min read
Two normative sentences went missing when one tasks spec superseded another
mosiddi profile

Two normative sentences went missing when one tasks spec superseded another

#mcp #agentsecurity #specreview
Comments
5 min read
Your telemetry and your evidence are not the same record
mosiddi profile

Your telemetry and your evidence are not the same record

#observability #confidentialcomputin #aigovernance #agents
Comments
5 min read
The tool list was advertised, the resolver decided
mosiddi profile

The tool list was advertised, the resolver decided

#agentsecurity #toolcalling #enforcement
Comments
4 min read
The MCP registry checks that the repository URL looks like GitHub
mosiddi profile

The MCP registry checks that the repository URL looks like GitHub

#agt #mcpserver #mcpregistry
Comments
5 min read
The platform bit that means the opposite of what the doc says
mosiddi profile

The platform bit that means the opposite of what the doc says

#attestation #sevsnp #evidence
Comments
4 min read
The attestation everyone cites cannot be looked up any more
mosiddi profile

The attestation everyone cites cannot be looked up any more

#supplychain #evidence #provenance
Comments
5 min read
My quickstart ends in FAIL, and that is the correct answer
mosiddi profile

My quickstart ends in FAIL, and that is the correct answer

#security #ai #agents #opensource
1
Comments 1
3 min read
Sovereign verifiability takes three layers. A2A just secured the foundation.
mosiddi profile

Sovereign verifiability takes three layers. A2A just secured the foundation.

#confidentialcomputin #aigovernance #opensource #agenticai
Comments
8 min read
The LiteLLM compromise is not in any of the places you would look for it
mosiddi profile

The LiteLLM compromise is not in any of the places you would look for it

#supplychainsecurity #cicd #security #devops
Comments
4 min read
What the encrypted reasoning paper actually counted
mosiddi profile

What the encrypted reasoning paper actually counted

#agentsecurity #evidence #retention
Comments
4 min read
What a signature does not prove
mosiddi profile

What a signature does not prove

#security #ai #confidentialcomputing #agents
Comments
8 min read
Two of the three endpoints checked authorization
mosiddi profile

Two of the three endpoints checked authorization

#agentsecurity #api #authorization
Comments
4 min read
The approval prompt stops working after fifty clicks
mosiddi profile

The approval prompt stops working after fifty clicks

#agents #aigovernance #aisecurity #humanintheloop
Comments
4 min read
You downloaded a model. What did you actually get?
mosiddi profile

You downloaded a model. What did you actually get?

#agt #modelcustody #openweightmodel #agentrustio
Comments
4 min read
The best agent detector in production catches 67%. Plan for the rest.
mosiddi profile

The best agent detector in production catches 67%. Plan for the rest.

#cybersecurity #confidentialcomputin #agents #modelcontextprotocol
Comments
6 min read
Our Quickstart Did Not Work, And That Is The Interesting Part
mosiddi profile

Our Quickstart Did Not Work, And That Is The Interesting Part

#agents #security
Comments
4 min read
The industry scheduled the proof. Here is what provable inference has to prove.
mosiddi profile

The industry scheduled the proof. Here is what provable inference has to prove.

#machinelearning #confidentialcomputin #attestation #agents
Comments
6 min read
Nobody was negligent. The layer was missing.
mosiddi profile

Nobody was negligent. The layer was missing.

#agents #aigovernance #aisecurity #incidentresponse
Comments 1
6 min read
Soon Every Agent Will Have a Verifiable Identity. Then Comes the Harder Part.
mosiddi profile

Soon Every Agent Will Have a Verifiable Identity. Then Comes the Harder Part.

#cybersecurity #aigovernance #artificialintelligen #agents
Comments
4 min read
The most important sentence in the Hugging Face disclosure is the one about what did not happen
mosiddi profile

The most important sentence in the Hugging Face disclosure is the one about what did not happen

#supplychainsecurity #aigovernance #agents #aisecurity
Comments
3 min read
Open Weights Don’t End the Custody Problem. They Sharpen It.
mosiddi profile

Open Weights Don’t End the Custody Problem. They Sharpen It.

#opensourceai #confidentialcomputin #dataprivacy #agents
Comments
4 min read
Soon There Will Be More Agents Than Users. Here Is the Trust Layer That Makes That a Good Thing.
mosiddi profile

Soon There Will Be More Agents Than Users. Here Is the Trust Layer That Makes That a Good Thing.

#artificialintelligen #aigovernance #openstandards #agents
Comments
5 min read
Your Policy Engine Can Lie. Ours Can’t.
mosiddi profile

Your Policy Engine Can Lie. Ours Can’t.

#agents #mcps #cybersecurity #confidentialcomputin
Comments
8 min read
How Do You Prove an AI Agent Did What You Said It Did?
mosiddi profile

How Do You Prove an AI Agent Did What You Said It Did?

#trace #aisecurity #aigovernance #confidentialcomputin
Comments
6 min read
Prove What Your Agent Was, Not Just Who Called It
mosiddi profile

Prove What Your Agent Was, Not Just Who Called It

#agentgovernance #agentmanifest #confidentialcomputin #openstandards
Comments
5 min read
Every regulated AI deployment hits the same wall. The compliance review asks: prove the agent handled our data according to...
mosiddi profile

Every regulated AI deployment hits the same wall. The compliance review asks: prove the agent handled our data according to...

#agents #ai #security
Comments
1 min read
Every regulated AI deployment hits the same wall: prove the agent handled our data...
mosiddi profile

Every regulated AI deployment hits the same wall: prove the agent handled our data...

Comments
1 min read
A signed JWT proves who called your API. It proves nothing about the agent that made the call. Not which system prompt...
mosiddi profile

A signed JWT proves who called your API. It proves nothing about the agent that made the call. Not which system prompt...

#agents #ai #api #security
Comments
1 min read
New edition of Proof, Not Promises is live.
mosiddi profile

New edition of Proof, Not Promises is live.

Comments
1 min read
[Part 5] 20 Hard Questions About AI Agent Governance That Nobody Is Asking
mosiddi profile

[Part 5] 20 Hard Questions About AI Agent Governance That Nobody Is Asking

#architecture #humanintheloop #artificialgeneralint #aiethics
Comments
3 min read
If you want to understand what Agent Governance Toolkit actually does, this is the best place to start. This video explains...
mosiddi profile

If you want to understand what Agent Governance Toolkit actually does, this is the best place to start. This video explains...

Comments
1 min read
[Part 4] 20 Hard Questions About AI Agent Governance That Nobody Is Asking
mosiddi profile

[Part 4] 20 Hard Questions About AI Agent Governance That Nobody Is Asking

#decisionbom #agentgovernancetoolk #agentos #agt
Comments
2 min read
[Part 3] 20 Hard Questions About AI Agent Governance That Nobody Is Asking
mosiddi profile

[Part 3] 20 Hard Questions About AI Agent Governance That Nobody Is Asking

#decisionbom #agentmesh #agentos #agt
Comments
3 min read
[Part 2] 20 Hard Questions About AI Agent Governance That Nobody Is Asking
mosiddi profile

[Part 2] 20 Hard Questions About AI Agent Governance That Nobody Is Asking

#agentos #aigovernance #agenticai #scalebysubtraction
Comments
2 min read
20 Hard Questions About AI Agent Governance That Nobody Is Asking
mosiddi profile

20 Hard Questions About AI Agent Governance That Nobody Is Asking

#agentos #aigovernance #scalebysubtraction #cybersecurity
Comments
3 min read
Governing Google ADK Agents with Microsoft’s Open-Source Toolkit: A GCP-Native Guide
mosiddi profile

Governing Google ADK Agents with Microsoft’s Open-Source Toolkit: A GCP-Native Guide

#cybersecurity #aiarchitecture #agenticai #googlecloud
Comments
4 min read
Running AI Agent Governance on AWS, No Azure Required
mosiddi profile

Running AI Agent Governance on AWS, No Azure Required

#agt #agentgovernancetoolk #gcp #azure
Comments
5 min read
Observability for Non-Deterministic Systems: A Framework for AI Agent Reliability
mosiddi profile

Observability for Non-Deterministic Systems: A Framework for AI Agent Reliability

#systemreliability #llmops #agenticai #observability
Comments 1
3 min read
Securing AI agents with agent governance
mosiddi profile

Securing AI agents with agent governance

#opensource #artificialintelligen #agentmesh #aiagentgovernance
Comments 1
10 min read
OpenShell + Governance Toolkit: Engineering the Complete Agent Security Stack
mosiddi profile

OpenShell + Governance Toolkit: Engineering the Complete Agent Security Stack

#openclaw #openshell #agentreliability #aiagentgovernance
Comments
3 min read
Running 11 AI Agents in Production: How the Agent Governance Toolkit Secures Our Workflows
mosiddi profile

Running 11 AI Agents in Production: How the Agent Governance Toolkit Secures Our Workflows

#aigovernance #agentos #agentmesh #devsecops
Comments
4 min read
Engineering the Agent Hypervisor: OS Primitives for Multi-Agent Systems
mosiddi profile

Engineering the Agent Hypervisor: OS Primitives for Multi-Agent Systems

#agenthypervisor #aiarchitecture #agentos #agentmesh
Comments
3 min read
The Architect’s Dilemma: Skills, Agents, or an Operating System?
mosiddi profile

The Architect’s Dilemma: Skills, Agents, or an Operating System?

#sreagent #agenthypervisor #agentos #agentmesh
Comments
3 min read
Engineering Safety: A Layered Governance Architecture for GitHub
mosiddi profile

Engineering Safety: A Layered Governance Architecture for GitHub

#aisafety #githubcopilot #aiguardrails #agenticai
Comments
2 min read
loading...