SHRIKEBlog
Technical insights on AI security from the Shrike team.
The AI Agent Security Stack
The control layers, what each can and cannot do, and the downloadable control matrix.
DefinitionWhat Is Action Governance?
The canonical definition — how it differs from prompt scanning, and why agents can't govern themselves.
CoverageThe 17 Agentic Attack Techniques
The published threat taxonomy mapped to inline controls — with the gaps printed.
ThreatsWhat Is MCP Security?
Tool poisoning, rug pulls, and shadowing — and the controls that govern them.
How-toAgent Scope Declaration
Declare what an agent is for — purpose, allowed tools, expiry — and enforce it.
MappingOWASP Agentic Top 10
Every ASI risk mapped to where enforcement happens at the action layer.
Five Attacks, Five Verdicts: Inside the NemoClaw Action-Governance Recipe
A case study of the Shrike recipe that cleared NVIDIA maintainer security review — the architecture, the five live validation cases it ships, and what the review demanded before it could merge.
August 14, 2026When Google's Agent Calls Your Agent
Google's agentic booking now calls businesses — and what answers is increasingly the business's own AI, with authority to commit it. The phone line just became an agent-governance surface.
August 13, 2026Does DLP Stop Shadow AI? What It Catches — and What Agents Slip Past
Partially. DLP stops the patterns it recognizes on the channels it monitors — but shadow AI fails both conditions, and AI agents add a question DLP was never designed to answer.
August 12, 2026How Do You Prove AI-Agent Governance to an Auditor?
Auditors don't accept "we have a policy" — they accept evidence. The gap between claiming AI-agent governance and proving it, and what an assessor actually wants to see.
August 11, 2026Securing NemoClaw Agents with Shrike
A drop-in recipe that adds runtime governance to NemoClaw agents — checking tool calls, MCP calls, and responses against policy before they run.
April 9, 2026Why AI Agents Need Independent Governance
The model vendor can't audit itself. Why independent governance is a structural requirement for AI agent security.
April 9, 2026Shadow AI: The Security Gap Your DLP Can't See
A majority of developers use AI tools daily. Traditional DLP doesn't scan AI prompts. Here's how to close the gap.
April 9, 2026What Happens When AI Agents Spawn Sub-Agents
Delegation chains, blast-radius containment, and scope inheritance — governing the agent tree.