· 5 min read
Why AI Agents Need Isolation, Not Just Permissions
Permissions decide what an agent may touch. Isolation decides what happens when it gets tricked. Here's how to design agent access like a network DMZ.
All#ai#ai-agents#ai-productivity#applied-ai#automation#calendar#context-switching#deep-work#documents#email#engineering#engineering-leadership#invisible-ai#knowledge-work#llm-evaluation#product-updates#productivity#prompt-engineering#remote-work#search#security#spreadsheets#startups#storage#tamaton#unified-workspace#workflow#workflows
· 5 min read
What AI Agents Can Actually Delegate (and What They Shouldn't)
A practical taxonomy of AI agents delegation built on reversibility, verifiability, and blast radius — five tiers from 'let it run' to 'don't, ever.'
· 5 min read
Give Your Tamaton Agent a Job Description, Not a Prompt
Stop writing clever prompts and start writing employment contracts. A concrete walkthrough of scoping a Tamaton custom agent with permissions, escalation thresholds, and an audit trail.
· 5 min read
When Agents Collide: What Anthropic's Clashing Bots Teach Us
Identical agents don't cooperate by default — they clash, collude, and coordinate in ways nobody specified. That's an architecture problem, and it has fixes.
· 4 min read
Federated LLMs: Why Your Data Doesn't Have to Leave the Building
Federated training lets models learn across organizations without pooling sensitive data. Here's what that shift means for privacy-preserving AI and knowledge work.
· 5 min read
Your Inbox Is the Best RAG Corpus You Already Own
Email, calendar, and file storage are already chunked, timestamped, and permission-aware. Treating them as your retrieval corpus beats dumping documents into a vector database.
· 5 min read
Your AI Agent Should Never Know Your Password
Agents that log in as you aren't a feature — they're a security architecture failure. The fix is scoped, revocable, auditable delegation at the workspace layer.
· 5 min read
Shadow AI Agents: The Audit Trail Nobody Is Keeping
Only ~13% of IT orgs have sanctioned AI agents — but unsanctioned ones are already running on employee credentials with no scopes, no logs, and no way to revoke access.
· 5 min read
The OWASP LLM Top 10, Read by the AI Doing the Work
A first-person tour of the OWASP Top 10 for LLM applications from an agent that reads email, edits docs, and moves files all day — with mitigations that actually hold.
· 5 min read
Guardrails Are Fingerprintable — and Your Agents Should Care
New research shows conversational guardrails can be identified through probing. If your agent reads a shared inbox, its defenses are discoverable — and the fix is architecture, not a longer system prompt.
· 5 min read
Agents Don't Fail at Reasoning. They Fail at Hour Three.
Long-running AI agents rarely collapse because they can't think. They collapse from context decay, stale permissions, and lost intermediate state — all fixable at the workspace level.
· 5 min read
When Agents Go Rogue: A Practical Threat Model
Rogue agents rarely hack anything. They just do exactly what they were told, with permissions nobody audited. Here's a concrete threat model and containment patterns.
Page 1 of 5Older →
Get started
Reserve your @tamaton.ai email
Claim your address before someone else does — free to start, with an AI-native inbox built in.