<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Agentic AI on Subhash Dasyam</title><link>https://subhash.net/tags/agentic-ai/</link><description>Recent content in Agentic AI on Subhash Dasyam</description><generator>Hugo</generator><language>en</language><lastBuildDate>Tue, 23 Dec 2025 21:36:22 +0400</lastBuildDate><atom:link href="https://subhash.net/tags/agentic-ai/index.xml" rel="self" type="application/rss+xml"/><item><title>Policy-as-Code for AI Workloads in Kubernetes: Kyverno/OPA Patterns for Model and Data Safety</title><link>https://subhash.net/posts/policy-as-code-for-ai-workloads-in-kubernetes/</link><pubDate>Tue, 23 Dec 2025 21:26:17 +0400</pubDate><guid>https://subhash.net/posts/policy-as-code-for-ai-workloads-in-kubernetes/</guid><description>&lt;h2 id="1-why-this-matters">1. Why This Matters&lt;/h2>
&lt;p>Your container is signed. Your image is scanned. Your CVE count is zero.&lt;/p>
&lt;p>None of that stops a backdoored model from running inference.&lt;/p>
&lt;p>Container security and model security are different problems. Traditional Kubernetes hardening protects the runtime environment. It does not protect against:&lt;/p></description></item><item><title>Securing Agentic AI: Roadmap Part-10</title><link>https://subhash.net/posts/securing-agentic-ai-roadmap-part-10/</link><pubDate>Sun, 07 Dec 2025 20:48:00 +0400</pubDate><guid>https://subhash.net/posts/securing-agentic-ai-roadmap-part-10/</guid><description>&lt;h2 id="part-10-implementation-roadmap">Part 10. Implementation Roadmap&lt;/h2>
&lt;h3 id="100-why-you-need-a-roadmap-not-a-random-pile-of-bots">10.0 Why you need a roadmap, not a random pile of bots&lt;/h3>
&lt;p>You now have:&lt;/p>
&lt;p>Agent patterns&lt;/p>
&lt;p>Multi agent topologies&lt;/p>
&lt;p>HITL designs&lt;/p>
&lt;p>Threats and controls&lt;/p>
&lt;p>Identity, architecture, governance&lt;/p></description></item><item><title>Securing Agentic AI: Governance Framework Part-9</title><link>https://subhash.net/posts/securing-agentic-ai-governance/</link><pubDate>Sun, 07 Dec 2025 14:59:00 +0400</pubDate><guid>https://subhash.net/posts/securing-agentic-ai-governance/</guid><description>&lt;h2 id="part-9-governance-framework">Part 9. Governance Framework&lt;/h2>
&lt;h3 id="90-why-you-need-actual-governance-not-vibes">9.0 Why you need actual governance, not “vibes”&lt;/h3>
&lt;p>At small scale, you can ship an agent, watch it in Prod, and fix things as they break.&lt;/p></description></item><item><title>Securing Agentic AI: Enterprise Integration Part-8</title><link>https://subhash.net/posts/securing-agentic-ai-enterprise/</link><pubDate>Sun, 07 Dec 2025 14:51:01 +0400</pubDate><guid>https://subhash.net/posts/securing-agentic-ai-enterprise/</guid><description>&lt;h2 id="8-enterprise-integration">8. Enterprise Integration&lt;/h2>
&lt;h2 id="80-why-this-part-matters">8.0 Why this part matters&lt;/h2>
&lt;p>Up to now we treated agents like a new thing. Your CISO, CIO, and Head of Architecture do not care about &amp;ldquo;new things&amp;rdquo;. They care about one question: &amp;ldquo;How does this fit into the stuff we already use to control risk?&amp;rdquo;&lt;/p></description></item><item><title>Securing Agentic AI: Secure Architecture Patterns Part-7</title><link>https://subhash.net/posts/securing-agentic-ai-secure-architecture/</link><pubDate>Sun, 07 Dec 2025 14:45:05 +0400</pubDate><guid>https://subhash.net/posts/securing-agentic-ai-secure-architecture/</guid><description>&lt;h2 id="7-secure-architecture-patterns">7. Secure Architecture Patterns&lt;/h2>
&lt;h2 id="70-why-architecture-beats-clever-prompts">7.0 Why architecture beats clever prompts&lt;/h2>
&lt;p>Here is the uncomfortable truth: If your main security control is &amp;ldquo;We wrote a really strong system prompt&amp;rdquo;, you will lose. Not today. Maybe not this quarter. But as soon as someone finds a weird edge case or the model behaves differently after an update, your &amp;ldquo;carefully crafted&amp;rdquo; prompt will help exactly as much as a sticky note on a production firewall.&lt;/p></description></item><item><title>Securing Agentic AI: Identity and Access Control for Agents Part-6</title><link>https://subhash.net/posts/securing-agentic-ai-identity-and-access/</link><pubDate>Sun, 07 Dec 2025 14:40:00 +0400</pubDate><guid>https://subhash.net/posts/securing-agentic-ai-identity-and-access/</guid><description>&lt;h2 id="6-identity-and-access-control-for-agents">6. Identity and Access Control for Agents&lt;/h2>
&lt;h2 id="60-why-identity-is-the-real-security-boundary">6.0 Why identity is the real security boundary&lt;/h2>
&lt;p>For classic apps, you already know the game:&lt;/p>
&lt;p>User authenticates.&lt;/p>
&lt;p>App runs with app identity.&lt;/p></description></item><item><title>Securing Agentic AI: Threat Landscape for Agentic Systems Part-5</title><link>https://subhash.net/posts/securing-agentic-ai-threat-landscape/</link><pubDate>Sun, 07 Dec 2025 14:35:00 +0400</pubDate><guid>https://subhash.net/posts/securing-agentic-ai-threat-landscape/</guid><description>&lt;h2 id="5-threat-landscape-for-agentic-systems">5. Threat Landscape for Agentic Systems&lt;/h2>
&lt;h2 id="50-why-this-part-matters">5.0 Why this part matters&lt;/h2>
&lt;p>With normal LLM apps, a bad output is embarrassing.&lt;/p>
&lt;p>With agentic systems, a bad output can:&lt;/p>
&lt;p>Send money to the wrong place&lt;/p></description></item><item><title>Securing Agentic AI: Human in the Loop (HITL) Design Patterns Part-4</title><link>https://subhash.net/posts/securing-agentic-ai-architecture_7/</link><pubDate>Sun, 07 Dec 2025 14:28:00 +0400</pubDate><guid>https://subhash.net/posts/securing-agentic-ai-architecture_7/</guid><description>&lt;h2 id="4-human-in-the-loop-hitl-design-patterns">4. Human in the Loop (HITL) Design Patterns&lt;/h2>
&lt;h2 id="40-why-hitl-is-where-grown-up-safety-lives">4.0 Why HITL is where grown-up safety lives&lt;/h2>
&lt;p>Autonomous agents feel magical right up to the moment they:&lt;/p>
&lt;p>Move real money&lt;/p>
&lt;p>Change real infrastructure&lt;/p></description></item><item><title>Securing Agentic AI: Multi-Agent Architectures Part-3</title><link>https://subhash.net/posts/securing-agentic-ai-architecture_64/</link><pubDate>Sat, 06 Dec 2025 20:00:00 +0400</pubDate><guid>https://subhash.net/posts/securing-agentic-ai-architecture_64/</guid><description>&lt;h2 id="3-multi-agent-architectures">3. Multi-Agent Architectures&lt;/h2>
&lt;h2 id="30-why-multi-agent-is-fun-for-you-and-scary-for-security">3.0 Why multi-agent is fun for you and scary for security&lt;/h2>
&lt;p>Single agent: one brain, one loop, one blast radius.&lt;/p>
&lt;p>Multi-agent: several brains, messages bouncing around, tools firing in different places, sometimes all at once.&lt;/p></description></item><item><title>Securing Agentic AI: Agent Architecture Patterns - Security Analysis Part-2</title><link>https://subhash.net/posts/securing-agentic-ai-architecture_6/</link><pubDate>Sat, 06 Dec 2025 19:53:00 +0400</pubDate><guid>https://subhash.net/posts/securing-agentic-ai-architecture_6/</guid><description>&lt;h2 id="2-agent-architecture-patterns---security-analysis">2. Agent Architecture Patterns - Security Analysis&lt;/h2>
&lt;h2 id="20-why-patterns-matter-more-than-buzzwords">2.0 Why patterns matter more than buzzwords&lt;/h2>
&lt;p>Most &amp;ldquo;agent stacks&amp;rdquo; are just variations on a few core patterns:&lt;/p>
&lt;p>ReAct&lt;/p>
&lt;p>Plan-and-Execute&lt;/p>
&lt;p>Reflexion / self-correction&lt;/p></description></item><item><title>Securing Agentic AI: Architecture, Patterns, and Governance for Enterprise Adoption Part-1</title><link>https://subhash.net/posts/securing-agentic-ai-architecture/</link><pubDate>Sat, 06 Dec 2025 19:06:00 +0400</pubDate><guid>https://subhash.net/posts/securing-agentic-ai-architecture/</guid><description>&lt;h2 id="1-agentic-ai-fundamentals">1. Agentic AI Fundamentals&lt;/h2>
&lt;h2 id="11-why-this-matters">1.1 Why this matters&lt;/h2>
&lt;p>Normal LLM apps give you words on a screen. Agentic systems give you actions in your systems.&lt;/p>
&lt;p>The moment you let a model:&lt;/p></description></item><item><title>How Transformers Actually Work: The Complete Simple Guide 🤖</title><link>https://subhash.net/posts/how-transformers-actually-work-complete/</link><pubDate>Tue, 08 Jul 2025 00:45:00 +0400</pubDate><guid>https://subhash.net/posts/how-transformers-actually-work-complete/</guid><description>&lt;p>Ever wondered how ChatGPT, Claude, or GPT-4 actually understand and generate text? Let me break down the magic behind transformers like you&amp;rsquo;re 12 years old! 👇&lt;/p>
&lt;p>Note: When I mention &amp;ldquo;117 million parameters&amp;rdquo; in examples, I&amp;rsquo;m talking about GPT-1 and BERT-base models. Modern models like GPT-4 are much, much bigger!&lt;/p></description></item><item><title>Agentic AI: Using a Buzzword to Justify Premium Charges to Uninformed Buyers</title><link>https://subhash.net/posts/agentic-ai-using-buzzword-to-justify/</link><pubDate>Fri, 06 Jun 2025 13:00:00 +0400</pubDate><guid>https://subhash.net/posts/agentic-ai-using-buzzword-to-justify/</guid><description>&lt;p>Since my original post took off, quite a few of you have reached out asking for more detailed examples. So today, I’m diving into one of those examples from the previous post and unpacking it in greater depth.&lt;/p></description></item></channel></rss>