Fi 🏳️⚧️munin@infosec.exchange
Oct 14, 2026, 5:45 AMI recently wrote some policy saying that agentic processes should not be issued credentials because they attempt to reuse them, and I kinda figured that the implication of "the creds end up at the company" should go without saying, but now I'm kinda wondering if I should've made that more explicit.