Secure Software Factory Show and Tell

As models have grown dramatically in capability over the last year, many engineering teams have been inspired to create what has become known as a software factory: a highly autonomous agentic system that produces software.

As we’ve watched teams create software factories that have enabled rapid innovation we have also watched agents escape sandboxes, drop databases, and trigger unauthorized production deploys. Agent behavior is unpredictable and teams that want to build a production ready software factory need to be able to confidently answer three key questions:

What is operating, with what capabilities?

Is it staying inside approved boundaries?

Can you prove what happened and stop it?

Our model for building a working and secure software factory is based off of Agent Baseline, a reference architecture for deploying and operating agents in production. Agent Baseline states that teams must focus on six outcomes: the ability to Discover, Constrain, Authorize, Observe, Validate, and Respond. We’ll have a panel and live demos to show how each outcome leads to a production-grade software factory.

On the panel:

Dick Hardt, Founder of AAuth and co-author of OAuth 2.0 and JWT

Ian Livingstone, Co-Founder and CEO of Keycard.

Ahmad Nassri, CTO of Socket

Zachary Hamilton, Solutions Engineer at Braintrust

Eli Aleyner, VP Product Strategy at Docker

Moderated by Allie Howe, host of the Insecure Agents Podcast.

Followed by live demos:

Keycard will show

How to discover what's running

How to authorize agent actions at runtime and grant access scoped to the task at hand

How to respond to a rogue agent

Docker will show

How to constrain an agent's execution environment

Braintrust will show

How to observe agent behavior and drift

Socket will show

How to validate agentic components

Doors open at 5:30. Come if you're want to build a secure, production-grade software factory.