Security as a property of the system, not a habit
The thing I audit for is the thing the platform enforces.
When I audit apps people built with AI, the findings are rarely about clever code. They’re about access: a key with too much power, a database anyone can query, an integration that can write when it only needed to read. Gatekeepers move that problem from each app to the platform. An agent asked to fix the typos in one Google Doc gets that one doc, not your Drive.
A sandbox around every app and a gate in front of every system is also the first setup where I’m comfortable telling a non-technical team to go build their own tools.
Company AI setups, judged
- Customer data pasted into personal AI accountsCritical
- Agents with org-wide tokens set to auto-approveCritical
- A company chatbot that can’t see any of your systemsNeeds work
- A scoped gatekeeper per system, with every action loggedPass
- Side effects queued for human approval in bulkPass