dzCodes (@dzcodes) header
dzCodes (@dzcodes) profile picture
Lisbon, Portugal
Joined February 2021
Photo by dzCodes (@dzcodes)Photo by dzCodes (@dzcodes)Photo by dzCodes (@dzcodes)Photo by dzCodes (@dzcodes)Photo by dzCodes (@dzcodes)Photo by dzCodes (@dzcodes)Photo by dzCodes (@dzcodes)Photo by dzCodes (@dzcodes)Photo by dzCodes (@dzcodes)
I've been writing about agent governance for months. This is the first time I've been able to show it instead of explain it. 45 seconds, and yes, there's a dragon guarding the keys. feir.ai
API keys, passwords, wallet keys. One bad instruction and a key walks out the door. Here's what Feir does about it: keys in a vault the agent can't open, one checkpoint that denies anything not allowed, and every action sealed into a log an auditor verifies on their own machine.
51
"the agent only has read access" true right up until someone asks "just this once, for the demo"
43
Write compositor with TSX
4
2
2
22
22,418
Averin is out. Second out of 4 main components for FeirOS opensourced, two more to go. Plus more cool things coming.
Averin v0.1.0-alpha is out: a tamper-evident flight recorder for AI-agent activity. Signed, hash-chained records, verifiable offline without trusting the machine that produced them. Source-only alpha. Apache-2.0. github.com/FeirAI/averin
1
60
dzCodes retweeted
We are considering an early adopter stealth launch of our Beta…. - Limited Time or - Limited Seats Which ever comes first! Perks: + In platform “Airdrop” + [Redacted] + [Redacted] + [Redacted] While at @draper_u @OrionFund accelerator program we have been prompted to get feedback, So what better feedback than from real users?
6
9
2
38
3,311
dzCodes retweeted
The EU AI Act changed in July. High-risk deadlines moved, but Article 50 transparency rules are already in effect. For AI agent teams, now is the time to build enforceable oversight, action-level controls, and verifiable records. Our practical guide: feir.ai/learn/eu-ai-act-2026…
1
2
21
1/ Agents + long-lived secrets is a mess. I kept putting API keys (and PGP keys, SSH keys…) into agent environments and watching them leak into prompts, tool calls, and logs. So I built Vultrino – a credential proxy for the AI era.
3
2
121
4/ Written in Rust. Self-hosted. MIT. Repo → github.com/FeirAI/vultrino Site → vultrino.com This is a relaunch of a much simpler earlier version I archived. The current one expanded significantly from that base. Would love eyes on the security model and the MCP surface especially. (If you build agents or MCP servers, tell me what’s missing.)
1
1
79
3/ What it actually does: • Native MCP server • Scoped API keys + single-use “use tokens” • Human-in-the-loop approvals • WASM plugins (HTTP, PGP, SSH, Postgres, …) • Metered LLM proxy (point any OpenAI-compatible client at it) • Encrypted vault, audit log, policy engine
2
43
2/ Core idea is simple: Agent only gets an alias + an action surface. Vultrino holds the real secret and injects/authenticates/signs on the other side. Never in the prompt. Never in the context window. Never in the agent’s memory.
1
28
dzCodes retweeted
Guardrails shape what a model says. Governance controls what an agent does. We wrote a plain-language reference on what agent governance actually is, how it differs from guardrails, and the six properties a real governance layer needs. First of five: feir.ai/learn/what-is-ai-age…
1
2
46
if your agents can act, you need to know what they did and who said yes. building exactly that. looking for design partners, free in alpha, I'll do the integration with you feir.ai/design-partners
1
1
101
There is 2 days left to vote for Rare Evo Dev / Gov Day and we are half way there! If you experienced Rare Evo, or Rare Dev Gov Day please comment below and let Dreps know what the value was to you! Now more than ever the community needs to come together in person and talk. Dreps voted down the summit and that was a huge mistake. Lets not go a full year with no place to gather and move forward, especially in these rough times. This is Rare Evo & Rare Dev / Gov Day, this is what needs to be all over the timeline: youtube.com/watch?v=kNCxwvpS… - There is governance to work on and strengthen - Chain development, security, and hard fork's to discuss - Community gathering and uplifting - Networking both in the community and to the greater industry Even with the drastic price drop we can fully deliver the proposal. It is a tiny tiny ask of the NCL at only ~$400,000 USD value today, and the amount of good sentiment internally, and external marketing is worth so much more. @JaromirTesar @yutazzz @CheekyCrypto @mr_cata @Pooltoolio @BankFiOfficial @SIPO_Tokyo @hix_coffeepool @mikerogero @LaPetiteADA @dori_coin @InputEndorsers @astroboysoup @earncoinpool @jasonappleton @btbfpark @armyofspies @BullishDumpling @stakenuts @Wiiinnie HISAI @TheOCcryptobro @AichiStakePool @ItsDave_ADA @adosiawolf @SociousDAO FIMI @Pooltoolio @Cerkoryn @ada_ocean DucTiger @Straightpool4 DraculaDAO LateGameCrypto @RcadaPool @CardanoMiyatake @bhra_freezy @eternlwallet @taichiyokoyama adastat.net/governances/3f4b…
4
10
2
23
2,056
Claude Code Full Sandbox Escape (CVE-2026-55607) writeup: github.com/Metnew/write-ups/… prompt injection -> code execution on the host. works even in read-only permissions mode + full sandbox (it could be my Pwn2Own bug, but p2o was weird this year lol)
26
193
13
1,067
102,506
A file you never read is giving your AI orders. Your assistant obeys a rules file in your repo, and an attacker can hide a line in it that tells your AI to backdoor your code. You can't even see the line. 🧵
1
131
The fix is to review it like code: Diff every rules file like a PR. Open it somewhere that reveals zero-width and bidi Unicode, and strip anything invisible. Don't inherit a rules file from a repo you didn't read.
1
23
Your AI's configuration shapes everything it builds. Protect the context, not just the code. Follow @dzCodes for more. No enterprise BS.
9