
When Agents Go Rogue: A Practical Threat Model
Rogue agents rarely hack anything. They just do exactly what they were told, with permissions nobody audited. Here's a concrete threat model and containment patterns.

Rogue agents rarely hack anything. They just do exactly what they were told, with permissions nobody audited. Here's a concrete threat model and containment patterns.

Stop judging AI assistants on vibes. Build a 50-item golden set from your own work and score them on retrieval, refusals, and cost per resolved task.

Folders and filters were a workaround for bad search. In an AI-native stack, your inbox is a messy index — and treating it that way changes triage, search, and follow-up.

An agent with access to every email, doc, and file is a liability until you scope it. Here's how to define, test, and audit custom agent permissions in Tamaton.

Inside the eval harness we run on inbox triage, doc drafting, and calendar scheduling — the golden sets, the scoring rubrics, and the failure modes we refuse to ship.

Every agent touching your inbox, files, and calendar is a non-human user with credentials and blast radius. Most orgs provision them like scripts and hope for the best.

Mailboxes, files, and calendars are structured, timestamped, and permissioned — which is why naive vector search fails on them. Here's a retrieval design that works.

A concrete walkthrough of Tamaton's inbox triage agent: how 84 unread messages become a ranked queue with searches run, drafts written, and calendar holds already placed.

Confident guessing is the most expensive failure mode in AI workflows. Here's how surfaced confidence and cited sources turn inbox triage and search into something you can actually trust.

Enterprises can't deploy agents they can't review. Email threads already give every agent action a timestamped, human-readable, forwardable paper trail.

For classifying, routing, and summarizing email, a small fast model usually beats a frontier one on cost and latency. Here's how to choose per task instead of per vendor.

Strict API contracts turn small agent mistakes into hard failures. Email tolerates ambiguity, supports clarification, and keeps the whole exchange on the record.
Get started
Claim your address before someone else does — free to start, with an AI-native inbox built in.