Skip to content

docs(readme): lead the opening with what this demonstrates #1

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
tsmith-surgexi merged 1 commit into from
Sep 15, 2026
Merged

docs(readme): lead the opening with what this demonstrates #1

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 2 additions & 4 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,14 +1,12 @@
<!-- Copyright © 2026 SurgeXi Business Intelligence, a Teamsmith Enterprises LLC company. All Rights Reserved. -->
# 🛡️ secure-agent-patterns

> Defensive patterns for **hardening agentic AI systems** — how to give an LLM tools and autonomy without giving away the keys to the kingdom.
> The **threat model and control-plane design** for governing agentic AI — how to give an LLM tools and autonomy without giving away the keys to the kingdom. This is the intellectual foundation behind [**Vertirite**](https://vertirite.com), SurgeXi's AI-governance control plane.

[![ci](https://github.com/tsmith-surgexi/secure-agent-patterns/actions/workflows/ci.yml/badge.svg)](https://github.com/tsmith-surgexi/secure-agent-patterns/actions/workflows/ci.yml)
[![license: source-available](https://img.shields.io/badge/license-source--available-blue.svg)](LICENSE)

A practitioner's reference for the security side of agentic AI. As LLMs gain the ability to call tools, browse, and act, the attack surface shifts. This repo collects the **defensive** patterns I apply when designing agent systems — the same posture enterprise AI-security roles are now hiring for.

> This is defense-only material: it shows how to *protect* agent systems, not how to attack them.
**What this demonstrates.** As LLMs gain the ability to call tools, browse, and act, the attack surface shifts. This repo lays out the security posture I design agent systems around: treat model output as untrusted, route every side-effecting action through a single choke point, deny anything outside its grant, drop egress that isn't on the allowlist, and hold high-risk actions for a human. It's the threat model, the control-plane pattern, and a runnable proof — the *why* and the *how* that Vertirite productizes into a deployable control plane. Defense-only: it shows how to *protect* agent systems, not how to attack them. Setup and the runnable demo are below.

---

Expand Down
Loading