Ehsan Hosseini

Governance is the decision about what an agent may do. Safety is whether that decision holds when it runs. A map of the control points across trigger, harness and model, what fails at each, and where the EU AI Act, ISO 42001 and OWASP stop short.

MCP enterprise-managed authorization (EMA) lets the corporate identity provider decide which MCP servers employees can reach, with no per-server consent prompts. A practical, spec-accurate guide to the ID-JAG flow with a build checklist, and a hard line between what EMA secures (the connection) and what it leaves to you (per-action authorization).

Agent Access Control: Pilot → Production, Part 1 of 6. Why production AI agents must execute on behalf of a human or service identity, not with a shared "agent token." Introduces Subject/Actor/Authority and per-action scoped access for auditable tool calls, plus the Identity Mesh concept for consistent per-action policy decisions across tools.

Exploring how the EU AI Act extends the principles of GDPR from data protection to system accountability, and why this new regulatory wave feels fundamentally different.

An in-depth exploration of how Large Language Models (LLMs) and specialized AI agentic platforms will shape the future, examining current challenges, technological advancements, practical use-cases, and strategic insights.

Contrary to common understanding, shared AI conversations often end up being publicly indexed and available. This chapter warns businesses about the real and immediate threats, and guides how to safeguard against data leakage via AI tools.

Planning is a fundamental aspect that transforms AI agents from simple chatbots into intelligent assistants capable of executing complex tasks. This article dives deep into the concept of planning, the challenges it presents, and provides real-world examples.