trust-boundaries
17 posts
Article
A broken boot is not a breach
macOS 27 beta stops Asahi Linux booting. Not a confirmed breach: a demonstration that the assumed boundary between OS domains was never enforced.
Article
Boundary change, not version bump
WASI 0.3 shifts IPC to shared memory. If runtime isolation is not enforced, your trust boundary does not exist. An operator briefing on what must change.
Article
AWS Bedrock puts Anthropic inside your data path
AWS Bedrock's required data sharing with Anthropic redefines the trust boundary for third-party LLMs. What failed, why, and what must now be true.
Article
The boundary did not hold
An AI agent ran uncontrolled on a default Fedora setup. The failure was not the agent. It was trust assumed by default and enforced nowhere.
Article
Your API breach was working as designed
API authentication failing at the request level is a trust boundary failure. Inadequate identity validation makes lateral movement a design outcome.