Posts
Building the operator: an AI agent that holds the SSH keys, and the six layers that hold it
A second AI agent on an old laptop gets the access my assistant must never have: forced-command SSH keys, an ssh-agent with destination constraints, time-boxed change keys, phone approvals, a fail-closed policy gate, an egress allow-list and an append-only log off the box. With configs, scripts and the mistakes.