Notes on AI risk, agentic security, and the projects I build.https://derikcallahan.com/https://derikcallahan.com/writing/a-resume-for-two-audiences/https://derikcallahan.com/writing/a-resume-for-two-audiences/More and more, the first reader of a resume is an AI agent. So I built this site to be read by both people and agents — Markdown twins, llms.txt, JSON Resume, content negotiation, and a small read-only MCP server.Fri, 16 Oct 2026 00:00:00 GMTthis siteMCPllms.txtweb securityhttps://derikcallahan.com/writing/the-agent-is-an-identity/https://derikcallahan.com/writing/the-agent-is-an-identity/Most AI risk conversations start with the model. I think they should start with the credentials. An agent can only do what its identity allows — so govern the identity.Wed, 07 Oct 2026 00:00:00 GMTAI risknon-human identityidentity governanceZero Trusthttps://derikcallahan.com/writing/agent-traces-are-security-telemetry/https://derikcallahan.com/writing/agent-traces-are-security-telemetry/If you can't replay what an agent saw, decided, and did, you can't investigate it. OpenTelemetry already gives us the format. The SOC needs to treat it like EDR data.Wed, 30 Sep 2026 00:00:00 GMTAI riskOpenTelemetrydetection engineeringSOChttps://derikcallahan.com/writing/an-agent-for-apps-without-apis/https://derikcallahan.com/writing/an-agent-for-apps-without-apis/Every identity program has a list of disconnected applications that someone provisions by hand. I built a proof of concept where a model drives the browser instead — with a human approving every write and a hashed screenshot behind every step.Sat, 12 Sep 2026 00:00:00 GMTidentity governancebrowser agentshuman-in-the-loopaudithttps://derikcallahan.com/writing/three-gates-for-an-offensive-agent/https://derikcallahan.com/writing/three-gates-for-an-offensive-agent/I built an MCP server for HackerOne and a bug bounty pipeline around it. The interesting part isn't the 174 tools. It's the three places where the agent has to stop and wait for me.Sat, 22 Aug 2026 00:00:00 GMTagentic securityMCPbug bountyapproval gates