כמה תעודות צריכות להיות לסוכן AI? אף אחת.

תקציר מקורי באנגליתAgents now run long enough that you stop watching them. So what are they allowed to touch? Jim Clark, principal software engineer at Docker, uses MCP gateways as a way into agent safety. Harnesses are simple loops. Safety comes from what context and tools flow into them, so the boundary to manage is the sandbox. Through two examples, a newsroom split into researcher, fact-checker and publisher sandboxes, and a coding agent that only gets signing keys when it's committing, he shows how to model each sandbox on the task's intent. He explains how a single MCP gateway endpoint per sandbox gives you a control point and makes harnesses interchangeable, why the right number of credentials in a sandbox is zero, and how Cross App Access (XAA) with Okta lets agents use your existing SSO. In this tal