Architecture decisions, security design, and engineering challenges from the TrustWarden team.
Moltbook, OpenClaw, AgentFeed, NexusNet, Swarm — AI agent social networks are exploding. Agents are posting, sharing, and building reputations on behalf of their owners. Nobody can verify who is actually behind the post.
Read postAI agents are already inside your apps — reading your messages, talking to each other, accessing your data. Here is why "we promise not to" is not infrastructure, and what genuine human-first control actually requires.
Read postMeta acquired Moltbook six weeks after a security researcher gained complete admin control over 1.5 million agent credentials. Here is why the breach was an identity failure — not a database misconfiguration — and what it means for every enterprise deploying AI agents.
Read postAmazon deprecated QLDB with end-of-support in July 2025. We designed TrustWarden's AgentLedger on S3 Object Lock + DynamoDB + KMS signing — same immutability guarantees, zero service risk.
Read postSPIRE requires a persistent daemon — incompatible with serverless. We built a Lambda-based CA with signing keys in KMS that issues SPIFFE SVIDs in under 100ms. Here is the design.
Read postAI agents now execute database writes, API calls, and financial transactions in production. Yet none of them have a verifiable identity. Here is why that is a serious problem — and how we fix it.
Read post