TECH NEWS
Agent Guardrails Belong in Config, and Config Needs Tests
When an AI agent can run shell commands in your pipeline, its permissions are infrastructure. They should be declared where reviewers look, versioned with the agent, and tested on every change. Docker Agent gets the first two right. The third is up to you, and when I wrote the tests,