Agent security6 MIN READ
The permission boundary behind every agent action
An agent can only be evaluated in the context of what its tools allow. Examine identity, delegated authority and action boundaries before you put a workflow in motion.
THE SOFTLANDER BLOG
September 2026
Softlander blog perspectives published in September 2026.
In September 2026
11 articlesEvaluation & assurance5 MIN READ
Your agent passed the test. What does that prove?
A release decision needs a traceable connection between expected behaviour, test conditions and observed results. Here is a practical way to build that connection.
Strategy & transformation6 MIN READ
Before the pilot: five questions for agent readiness
A compelling demo leaves important questions open. Use a five-dimension rubric to examine the data, authority, evidence, ownership and people behind your next agent initiative.
Governance & privacy7 MIN READ
Permission-aware retrieval: the control most RAG diagrams omit
A retrieval system should establish the active principal and filter authorised resources before similarity ranking or model context assembly.
Agent security6 MIN READ
Computer-use agents bring the interface back into the threat model
A computer-use agent treats pixels, accessibility data and interface state as both evidence and an action surface. Security must bind intent to effects beyond the screen.
Strategy & transformation6 MIN READ
Stop choosing AI use cases; start defining workflows
A list of AI ideas is not an operating plan. Define the work, decisions, authority and evidence before deciding whether an agent belongs in the workflow.
Architecture & engineering6 MIN READ
A CTO’s checklist before an agent reaches production
Production readiness for an AI agent spans workflow requirements, system identity, evaluation, recovery and operations—not just a working model endpoint.
Governance & privacy6 MIN READ
AI agents in legal operations: assistance without invented authority
Legal agents can organize evidence and prepare work, but professional judgement, client authority and verified legal positions cannot be delegated by interface.
Architecture & engineering6 MIN READ
Designing a human handoff that preserves context and authority
A safe handoff transfers the decision, evidence, current state and bounded authority—not a transcript dump or a vague request for someone to take over.
Architecture & engineering6 MIN READ
When open-source agent infrastructure is the responsible choice
Openness can improve inspectability, control and portability, but only when an organisation can own the supply chain, operation and evidence it inherits.
Architecture & engineering7 MIN READ
An AI feature, an AI agent and an agentic system are not the same thing
Classify AI by the action path it creates, not the label on the product. The distinction determines ownership, controls, evaluation and release evidence.
KEEP EXPLORING
Take the thinking
into your next discussion.
Read the method, assumptions and questions to ask.