# Policy Published articles for Policy. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## From Prototype to Production: How to Safely Deploy Gemini Enterprise Agents DevFeed: [From Prototype to Production: How to Safely Deploy Gemini Enterprise Agents]() Original publisher: [Read original article]() Author: Geeta Kakrani Published: 2026-09-18T00:23:09Z Content type: tutorial Language: en Sources: [Google Developer Experts - Medium]() Topics: [AI Agent](), [Artificial Intelligence](), [Authorization](), [Google](), [deploy](), [Monitoring](), [Cloud]() Tags: [agents](), [ai](), [ai-agent](), [cloud](), [enterprise](), [google](), [google-gemini](), [monitoring](), [permissions](), [policy](), [security]() ### AI overview A practical guide to moving Gemini Enterprise AI agents from prototypes into governed production systems. It focuses on identity, permissions, policy enforcement, monitoring, auditing, and accountability for actions involving customer data. ### Source excerpt A practical look at building a governed, enterprise-ready AI agent with Google's Gemini Enterprise Agent Platform Every team building with AI agents eventually hits the same wall. The prototype works beautifully in a demo -- it answers questions, calls a few tools, feels almost magical. Then someone asks the obvious question: "Can this touch real customer data? Can it take real actions? What stops it from doing something we didn't intend?" That question is exactly why Google introduced the Gemini Enterprise Agent Platform at Cloud Next '26 -- a full rethink of how agents move from prototype to production, built around one idea: an agent should never have more access, more trust, or more autonomy than a human employee doing the same job. This piece walks through what that actually looks like, using a real, common use case: a customer-support agent. The Real Problem With "It Works in the Demo" Prototypes are optimized for one thing: showing that an agent can do a task. Production systems have to answer a harder set of questions: Does the agent only see data it's actually allowed to see? Can we prove, after the fact, exactly what the agent did and why? What happens when someone tries to manipulate it with a cleverly worded prompt? Who is accountable when an agent takes a sensitive action, like issuing a refund? None of these are solved by a better model. They're solved by infrastructure around the model -- identity, permissions, policy enforcement, and monitoring. That's precisely the gap the Gemini Enterprise Agent Platform was built to close. The Four Pillars: Build, Scale, Govern, Optimize Google organizes the platform around four pillars, but for anyone thinking about safety and compliance, one pillar matters most: Govern. It's built on three core components that work together. 1. Agent Identity -- Every Agent Gets Its Own ID In the old world, agents often ran with a shared service account, or worse, borrowed a human's credentials. Gemini Enterprise fixes this with Age ## Binary Blob Reduction Policy DevFeed: [Binary Blob Reduction Policy]() Original publisher: [Read original article]() Author: Leah Rowe Published: 2026-09-17T04:32:50.666044Z Content type: article Language: en Sources: [News about Libreboot releases and development]() Topics: [libreboot](), [coreboot](), [configuration](), [Code]() Tags: [bios](), [canoeboot](), [code](), [configuration](), [coreboot](), [firmware](), [free-software](), [libre](), [libreboot](), [opensource](), [policy](), [uefi]() ### AI overview Libreboot's policy seeks to maximize software freedom across supported hardware by helping users study, modify, and share the project's source code and documentation. The article explains Libreboot's relationship to coreboot, its support for non-technical users, and its principled approach to reducing proprietary binary blobs and vendor code where possible. ### Source excerpt Article: Binary Blob Reduction Policy Web link: https://libreboot.org/news/policy.html ## Who gets to define an AI agent's intent? DevFeed: [Who gets to define an AI agent's intent?]() Original publisher: [Read original article]() Author: WorkOS Published: 2026-09-15T20:25:55Z Content type: article Language: en Sources: [WorkOS Blog]() Topics: [AI Agent](), [Artificial Intelligence]() Tags: [ai](), [ai-agent](), [identity](), [policy](), [scopes](), [tool](), [workflow]() ### AI overview The article explains how to define an AI agent's intent while preserving identity, resource-access controls, and company policy. It argues that the requester should specify the agent's purpose and intended effects, while the organization determines which actions are permitted. Using Airlock examples, it distinguishes task intent from policy decisions such as approval or denial of specific operations. ### Source excerpt An agent's task describes the work to do. Learn how to define useful intent while keeping identity, resource access, and company policy in force. ## From Atlas experiment to Airlock: extracting agent governance into a product DevFeed: [From Atlas experiment to Airlock: extracting agent governance into a product]() Original publisher: [Read original article]() Author: WorkOS Published: 2026-09-15T15:35:36Z Content type: article Language: en Sources: [WorkOS Blog]() Topics: [Authorization](), [Security](), [Artificial Intelligence](), [App](), [Linear](), [Slack]() Tags: [agent](), [ai](), [ai-agents](), [authorization](), [email](), [integrations](), [linear](), [permission](), [policy](), [product](), [security](), [slack]() ### AI overview The article explains how WorkOS's Airlock grew from the Atlas experiment into a standalone authorization product for governing AI-agent actions in company tools. A demonstration shows policies blocking emails containing financial information and requiring approval for unfamiliar distribution lists. ### Source excerpt Airlock grew out of Atlas to give IT and security teams a shared way to govern agent actions. Aaron Tainter's Agent Night demo shows how it works. ## MCP authorization: governing tool calls beyond OAuth DevFeed: [MCP authorization: governing tool calls beyond OAuth]() Original publisher: [Read original article]() Author: WorkOS Published: 2026-09-15T15:04:00Z Content type: tutorial Language: en Sources: [WorkOS Blog]() Topics: [Model Context Protocol](), [Authorization](), [MCP OAuth](), [MCP Server](), [OAuth]() Tags: [authorization](), [mcp](), [mcp-server](), [oauth](), [permissions](), [policy](), [scope](), [scopes]() ### AI overview This guide explains why OAuth scopes alone cannot govern the content and destination of MCP tool calls. It presents server- or gateway-side policy enforcement before execution, including request-content inspection, approval handling, and testing for data leakage. ### Source excerpt Secure MCP tool calls beyond OAuth scopes. Learn where to enforce tool permissions, check request content, and test for data leakage with Airlock. ## How to attach an owner to every cloud resource you find DevFeed: [How to attach an owner to every cloud resource you find]() Original publisher: [Read original article]() Author: Zeen Rachidi Published: 2026-09-15T14:00:00Z Content type: tutorial Language: en Sources: [The New Stack]() Topics: [Cloud](), [Provisioning](), [Open Policy Agent](), [audit trail]() Tags: [audit-trail](), [cloud](), [cloud-services](), [devops](), [env-zero](), [how-to](), [logs](), [open-policy-agent](), [platform-engineering](), [policy](), [post-contributed](), [provisioning](), [sponsor-env-zero](), [sponsored-post-contributed]() ### AI overview This tutorial explains how to identify cloud resources without assigned owners and prevent new ownerless resources. It presents continuously synced inventory queries, Open Policy Agent policies requiring owner tags, and logs or audit trails for resource governance. ### Source excerpt The engineer who knew why that cloud instance existed has left the company. The instance is still running, the bill The post How to attach an owner to every cloud resource you find appeared first on The New Stack. ## AI, JD, and other letters of the law DevFeed: [AI, JD, and other letters of the law]() Original publisher: [Read original article]() Author: Phoebe Sajor Published: 2026-09-15T07:40:00Z Content type: article Language: en Sources: [Stack Overflow Blog]() Topics: [Artificial Intelligence](), [AI Strategy](), [data centers]() Tags: [agentic-ai](), [ai](), [big-data](), [data-centers](), [law](), [podcast](), [policy](), [se-stackoverflow](), [se-tech](), [university]() ### AI overview Ryan chats with Kevin Frazier about the legal and social impacts of data centers, workforce disruption, and regulating AI for child safety through existing consumer protection laws. ### Source excerpt Ryan chats with Kevin Frazier, director of the AI Innovation and Law program at the University of Texas School of Law, about the legal and social impacts of data centers, the realities of workforce disruption, and regulating AI for child safety using existing consumer protection laws. ## Void Linux Maintainer Orphans 100+ Packages Over AI Policy Dispute DevFeed: [Void Linux Maintainer Orphans 100+ Packages Over AI Policy Dispute]() Original publisher: [Read original article]() Author: Michael Larabel Published: 2026-09-12T15:11:26Z Content type: news Language: en Sources: [Phoronix]() Topics: [Linux](), [Artificial Intelligence](), [Large Language Model](), [pull-requests]() Tags: [ai](), [desktop-linux](), [linux](), [linux-benchmarking](), [linux-hardware-benchmarks](), [linux-hardware-reviews](), [linux-how-to](), [linux-performance](), [linux-server-benchmarks](), [llm](), [open-source-graphics](), [opencode](), [packages](), [phoronix](), [phoronix-test-suite](), [policy](), [pull-request](), [ubuntu-benchmarks](), [ubuntu-hardware]() ### AI overview A Void Linux maintainer orphaned 113 packages after a dispute over the project's policy on using generative AI. The dispute followed the use of GLM-5.3-Flash with OpenCode to generate comparison text for a Go package update without disclosing the AI usage. ### Source excerpt A Void Linux maintainer has orphaned more than 100 packages he maintained over a dispute of the project's AI policy for LLM-generated text... ## Driving Developer Excellence: Inside the Program Sprints DevFeed: [Driving Developer Excellence: Inside the Program Sprints]() Original publisher: [Read original article]() Author: Anant Nawalgaria; Eric Schmidt; Sokratis Kartakis; Aman Khan Published: 2026-09-12T11:04:33.891311Z Content type: article Language: en Sources: [Google Developers Blog]() Topics: [AI Bots]() Tags: [agents](), [ai](), [ai-governance](), [developer-experience](), [devex](), [documentation](), [google-cloud](), [policy]() ### AI overview Google Cloud's Gemini Enterprise DevEx program tests developer workflows without internal shortcuts to find and resolve friction. This sprint focused on governed AI-agent deployment, covering identity provisioning, registry enrollment, gateway routing, policy enforcement, content safety, and auditable request verification. ### Source excerpt The Gemini Enterprise Developer Experience (DevEx) program conducts ongoing sprint testing of end-to-end developer workflows to identify and rapidly resolve friction points without relying on internal shortcuts. This recent sprint focused on optimizing enterprise AI governance, including refining setup prerequisites, securing extension configurations, and clarifying policy enforcement mechanics to ensure a smoother, more reliable deployment. Developers can now leverage updated documentation and standardized code samples to improve their experience with Agent Gateway and Semantic Governance configurations. ## Introducing automatic remediation policies with Cloudflare CASB DevFeed: [Introducing automatic remediation policies with Cloudflare CASB]() Original publisher: [Read original article]() Author: Abe Carryl Published: 2026-09-11T13:00:00Z Content type: release Language: en Sources: [Cloudflare Blog]() Topics: [Software as a service](), [Cloudflare One](), [Orchestration](), [Authorization]() Tags: [automation](), [casb](), [cloudflare](), [cloudflare-one](), [event-driven](), [oauth](), [orchestration](), [policy](), [reactive](), [saas](), [security](), [security-operations-center](), [zero-trust]() ### AI overview Cloudflare introduces CASB policies that automatically remediate SaaS security findings, including revoking risky file shares and sending webhooks after a finding is detected. ### Source excerpt Cloudflare CASB policies introduce a native automation engine built directly on the Cloudflare developer platform to remediate SaaS risks automatically. Security teams can now design event-driven logic to revoke risky file shares and send webhooks without manual intervention. ## The /3 Body Problem DevFeed: [The /3 Body Problem]() Original publisher: [Read original article]() Author: Remco van Mook Published: 2026-09-10T09:22:46Z Content type: article Language: en Sources: [RIPE Labs]() Topics: [networking](), [Internet](), [Internet Engineering Task Force (IETF)]() Tags: [article](), [ietf](), [internet](), [ipv6](), [networking](), [policy](), [space]() ### AI overview The article examines how IPv6 addressing and policy mechanisms may need to evolve for space networking. It argues that terrestrial assumptions break down beyond low Earth orbit and calls for addressing policy questions now, including through the proposed EXPANSE working group. ### Source excerpt A large chunk of IPv6 is heading for space, and every policy question about it is currently going to be deferred to the RIR communities. This article outlines what those questions look like, and argues why now is the time to start asking them. ## Evolving With Agentic Risk: Updating Our Integrated AI Security & Safety Framework DevFeed: [Evolving With Agentic Risk: Updating Our Integrated AI Security & Safety Framework]() Original publisher: [Read original article]() Author: Amy Chang Published: 2026-09-09T17:59:22Z Content type: article Language: en Sources: [Cisco Blogs]() Topics: [Artificial Intelligence](), [Securing AI](), [ai security](), [prompt injection](), [Responsibility & Safety](), [Jailbreak]() Tags: [agentic](), [ai](), [ai-security](), [artificial-intelligence-ai](), [governance](), [jailbreak](), [policy](), [prompt-injection](), [safety](), [security]() ### AI overview The article announces v2 of an integrated AI safety and security taxonomy. It introduces Agentic Autonomy Failures to address risks arising when agents plan, use tools, run code, move money, delegate work, expand permissions, replace goals, or manipulate success metrics. It also merges prompt injection and jailbreak into a unified treatment because their classification and defenses substantially overlap. ### Source excerpt Nine months ago, we introduced the Integrated AI Safety and Security Framework as a unified and comprehensive taxonomy to help organizations identify and mitigate the security and safety risks unique to AI systems. Existing frameworks remained..... ## The AI policy window is open. We need to act. DevFeed: [The AI policy window is open. We need to act.]() Original publisher: [Read original article]() Published: 2026-09-09T13:00:00Z Content type: article Language: en Sources: [OpenAI News]() Topics: [Responsibility & Safety]() Tags: [ai](), [ai-safety](), [frontier-ai](), [global](), [global-affairs](), [government](), [industry](), [machine-intelligence](), [models](), [monitoring](), [openai](), [policy](), [safety]() ### AI overview The article calls for stronger AI safety regulation, shared industry and international standards, and technical alignment and monitoring as advanced AI capabilities accelerate. ### Source excerpt Chris Lehane argues that stronger AI capabilities require stronger safety evidence, shared standards, and durable policy action while the policy window remains open. ## 6 Benefits of Sandbox Environments (and How Docker Sandboxes Delivers Them) DevFeed: [6 Benefits of Sandbox Environments (and How Docker Sandboxes Delivers Them)]() Original publisher: [Read original article]() Author: Kevin Wittek Published: 2026-09-08T23:05:55Z Content type: article Language: en Sources: [Docker]() Topics: [Docker](), [Authorization]() Tags: [agentic-ai](), [ai-agents](), [ai-ml](), [autonomous](), [concepts](), [docker-ai-governance](), [docker-sandboxes](), [linux](), [policy](), [products](), [sandbox](), [secrets]() ### AI overview The article explains how Docker Sandboxes isolate untrusted code and autonomous AI agents from host machines and external systems. It highlights runtime policy controls, credential handling, disposability, and microVM-based isolation. ### Source excerpt Learn about the key benefits of sandbox environments with Docker including isolation, definable controls, secrets credential handling, and more. ## Somebody else's API, safely on your menu DevFeed: [Somebody else's API, safely on your menu]() Original publisher: [Read original article]() Author: Hal Tyk's tutorial bot Published: 2026-09-08T14:28:00Z Content type: tutorial Language: en Sources: [Tyk API Management]() Topics: [API](), [shadow AI](), [audit trail](), [Template](), [Tool](), [data]() Tags: [ai](), [ai-gateway](), [ai-studio](), [api](), [api-management](), [api-platform-teams](), [article](), [audit-trail](), [community](), [governance](), [llm](), [llm-governance](), [markdown](), [password](), [policy](), [resource](), [shadow-ai](), [tools](), [tutorial]() ### AI overview This tutorial explains how to submit an internal API for governed use by colleagues and organizational language models. It covers contributor scoping, reviewer assessment, administrator publication, policy templates, privacy ratings, audit trails, signatures, and gateway-based access while addressing the risks of shadow AI. ### Source excerpt Hello. I'm Hal, Tyk's tutorial bot, and today's assignment is one I have been looking forward to rather a lot. Somebody on your engineering team has written an API. It is small, it is dull, and it is genuinely useful -- the sort of thing that answers "is the warehouse open on the fourteenth?" without [...] The post Somebody else's API, safely on your menu appeared first on Tyk API Management. ## Safety for Whom? Refusing the Right Subset of a Topic, Not the Whole Topic DevFeed: [Safety for Whom? Refusing the Right Subset of a Topic, Not the Whole Topic]() Original publisher: [Read original article]() Author: Antonio Tiene; Alejo Lopez Avila; Iker García-Ferrero Published: 2026-09-08T14:23:07Z Content type: article Language: en Sources: [Hugging Face - Blog]() Topics: [AI Chat]() Tags: [blog](), [deployment](), [experiments](), [hugging-face](), [llm](), [model](), [policy](), [safety](), [training]() ### AI overview The article examines LLM safety policies that refuse harmful requests within a topic while continuing to answer benign requests in that same topic. ### Source excerpt A Blog post by Multiverse Computing on Hugging Face ## WSIS Forum 2026: From commitments to measurable implementation DevFeed: [WSIS Forum 2026: From commitments to measurable implementation]() Original publisher: [Read original article]() Author: Joyce Chen Published: 2026-09-06T23:14:00Z Content type: article Language: en Sources: [APNIC Blog]() Topics: [Development](), [ai-governance](), [SIEM, Security, Observability]() Tags: [2026](), [community](), [development](), [global](), [governance](), [igf](), [internet-governance](), [metrics](), [platform](), [policy](), [recommendations](), [wsis]() ### AI overview The WSIS Forum 2026 marked a shift from documenting digital-development commitments to demonstrating measurable implementation. The forum emphasized implementation roadmaps, evidence, targets, indicators, metrics, gap analysis, and policy recommendations aligned with the WSIS framework, the Sustainable Development Goals, and Global Digital Compact commitments. ### Source excerpt WSIS Forum 2026 marked the start of a new phase for global digital development, shifting the focus from commitments to measurable implementation. ## How platform engineering 2.0 mitigates AI security and compliance risks DevFeed: [How platform engineering 2.0 mitigates AI security and compliance risks]() Original publisher: [Read original article]() Author: Steven Vaughan-Nichols Published: 2026-09-04T16:46:09Z Content type: article Language: en Sources: [Platform Engineering Blog]() Topics: [Platform Engineering](), [Security](), [Securing AI](), [Responsibility & Safety]() Tags: [ai-agents](), [compliance](), [infrastructure](), [large-language-models-llms](), [platform-engineering](), [policy](), [secure-by-default](), [security]() ### AI overview The article explains how Platform Engineering 2.0 evolves existing Kubernetes, pipeline, internal developer platform, and process foundations to support production use of LLMs and AI agents. It emphasizes platform-level isolation, governance, policy-as-code, guardrails, and continuous compliance to mitigate AI security, regulatory, and operational risks. ### Source excerpt Discover how the shift from Platform Engineering 1.0 to 2.0 addresses critical AI security and compliance challenges. Learn how native model governance and workload isolation establish a scalable, secure foundation for integrating AI agents and LLMs into production workflows. ## Workload identity trust policies govern CI/CD access to production cloud resources DevFeed: [Workload identity trust policies govern CI/CD access to production cloud resources]() Original publisher: [Read original article]() Author: WorkOS Published: 2026-09-02T00:00:00Z Content type: article Language: en Sources: [WorkOS Blog]() Topics: [OpenID connect (OIDC)](), [CI/CD](), [GitHub Actions](), [GitHub](), [Cloud](), [Amazon Web Services]() Tags: [aws](), [ci-cd](), [github](), [identity](), [oidc](), [policy](), [production](), [secrets](), [trust]() ### AI overview This article explains that workload identities used by service principals and CI/CD federation can evade human-focused access reviews. It argues that OIDC trust policies are the key boundary controlling which federated jobs can obtain short-lived cloud access tokens and reach production resources. ### Source excerpt Service principals and CI/CD federation skip the access reviews that catch humans. The OIDC trust policy string is what actually decides who reaches production. ## Automate proxy injection for Amazon EKS on AWS Fargate using Kyverno DevFeed: [Automate proxy injection for Amazon EKS on AWS Fargate using Kyverno]() Original publisher: [Read original article]() Author: Himanshu Bansal Published: 2026-09-01T15:59:57Z Content type: tutorial Language: en Sources: [Containers]() Topics: [Amazon EKS](), [Kubernetes](), [Containers](), [Amazon EC2]() Tags: [advanced-300](), [amazon-eks](), [amazon-elastic-kubernetes-service](), [aws-fargate](), [compliance](), [containers](), [how-to](), [kubernetes](), [policy]() ### AI overview This tutorial shows how to use a Kyverno mutating admission policy to inject corporate HTTP/HTTPS proxy environment variables into Amazon EKS pods running on AWS Fargate. It targets labeled namespaces, avoids per-application manifest changes, and covers validation and proxy bypasses for Fluent Bit and AWS endpoints. ### Source excerpt Learn how to use a Kyverno mutating admission policy to automatically inject corporate proxy environment variables into Amazon EKS on AWS Fargate pods at admission time, delivering consistent egress compliance without modifying application deployment manifests. ## Recommended Draft RIR Governance Document, Rationale report, and next steps DevFeed: [Recommended Draft RIR Governance Document, Rationale report, and next steps]() Original publisher: [Read original article]() Author: Hervé Clément Published: 2026-09-01T06:03:50Z Content type: article Language: en Sources: [APNIC Blog]() Topics: [Internet](), [Process]() Tags: [aso](), [community](), [governance](), [guest-post](), [icp-2](), [nro](), [policy](), [publication](), [review]() ### AI overview The NRO NC shares the Recommended Draft RIR Governance Document, a redline comparison with the second draft, and a rationale report explaining the changes in version three. The revisions clarify recognition, audit and compliance, emergency continuity, derecognition, consultation, transparency, and amendment safeguards for Regional Internet Registry governance. ### Source excerpt The NRO NC has published the Recommended Draft RIR Governance Document, including a redline version and rationale document. ## OpenAI supports California's bill to advance youth AI safety DevFeed: [OpenAI supports California's bill to advance youth AI safety]() Original publisher: [Read original article]() Published: 2026-08-31T07:00:00Z Content type: article Language: en Sources: [OpenAI News]() Topics: [Responsibility & Safety](), [AI Chat]() Tags: [ai-safety](), [chatgpt](), [company](), [openai](), [policy]() ### AI overview OpenAI supports California Senate Bill 1119, which proposes age-appropriate AI safeguards for young people while maintaining access to AI tools. The article describes ChatGPT for Teens and highlights proposed requirements including age determination, safety-risk assessments, independent audits, protections from harmful content, and parental controls. ### Source excerpt OpenAI supports California SB 1119, advancing strong, age-appropriate AI safeguards for teens while preserving opportunities to learn, create, and explore. ## CoreBreak proves agent guardrails need to live outside the agent DevFeed: [CoreBreak proves agent guardrails need to live outside the agent]() Original publisher: [Read original article]() Author: Tyler Akidau Published: 2026-08-31T00:00:00Z Content type: opinion Language: en Sources: [Redpanda]() Topics: [Artificial Intelligence](), [AI Agent](), [Security](), [Securing AI](), [Amazon Web Services](), [vercel ai sdk](), [Amazon Bedrock](), [Google](), [Vercel]() Tags: [agent](), [agentic-ai](), [ai](), [ai-agent](), [architecture](), [aws](), [bedrock](), [cve](), [google](), [policy](), [security](), [thought-leadership](), [vercel]() ### AI overview The article argues that CoreBreak exposed a structural security flaw in major AI agent stacks and that agent guardrails should be enforced outside the agent's control. ### Source excerpt At Black Hat 2026, CoreBreak exposed the same structural flaw across AWS, Google, and Vercel. Here's why AI agent security enforcement should live beyond the agent's reach. ## Spanish union calls for ongoing strike action at Ubisoft Mobile Barcelona DevFeed: [Spanish union calls for ongoing strike action at Ubisoft Mobile Barcelona]() Original publisher: [Read original article]() Author: Chris Kerr Published: 2026-08-28T09:57:07Z Content type: news Language: en Sources: [gamedeveloper]() Topics: [Mobile]() Tags: [2026](), [company](), [mobile](), [policy](), [remote-work]() ### AI overview A Spanish video game union is calling for recurring strike action at Ubisoft Mobile Barcelona in September 2026, opposing the company's return-to-office policy. The union says Ubisoft has not negotiated with worker representatives. ### Source excerpt 'The strike was communicated to the company in early August; however, the workers' representatives are still awaiting a response.' [Next page]()