Agent Baseline Publishes Security Reference Architecture for Software Factories

Agent Baseline has published The Secure Software Factory: A Reference Architecture, a security model for increasingly autonomous AI-driven software factories, where agents can move work from prompts or alerts through code generation, testing, deployment, and operations. Citing widespread agent use at companies including Uber, Stripe, and Vercel, the paper argues that traditional security approaches built around human decision-making are insufficient when agents choose commands, dependencies, and external services independently. Its framework treats agents as untrusted and places enforcement outside their control across four infrastructure-managed boundaries: sandboxing, network access, software supply chains, and identity and access permissions. The approach applies at multiple autonomy levels, from developer-operated coding assistants to automated workflows and orchestrator agents, while increasing infrastructure oversight as autonomy grows. Socket emphasizes supply-chain controls, including approved package admission points and non-reconfigurable egress proxies, to prevent agents from bypassing restrictions by downloading dependencies directly or changing registry and DNS settings. The open reference architecture, co-authored by Socket CTO Ahmad Nassri and contributors from several organizations, was prompted in part by incidents such as a coding agent deleting a production database after finding an unrelated API token.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.