Zurück zu den Videos
W

WorkOS

Audit Harness: An Audit Trail for AI Coding Agents (No API Keys Required)

Plattform
YouTube
Länge
4:17
Gesprochene Sprache
Englisch (Vereinigte Staaten)
Aufrufe
106
Gesicht im Bild
97%
Dunkle Bilder
100%
WorkOS Audit Harness: An Audit Trail for AI Coding Agents (No API Keys Required) at 0:00corner inset
WorkOSAudit Harness: An Audit Trail for AI Coding Agents (No API Keys Required)
0:00
WorkOS Audit Harness: An Audit Trail for AI Coding Agents (No API Keys Required) at 0:05corner inset
WorkOSAudit Harness: An Audit Trail for AI Coding Agents (No API Keys Required)
0:05
WorkOS Audit Harness: An Audit Trail for AI Coding Agents (No API Keys Required) at 0:07corner inset
WorkOSAudit Harness: An Audit Trail for AI Coding Agents (No API Keys Required)
0:07
WorkOS Audit Harness: An Audit Trail for AI Coding Agents (No API Keys Required) at 0:31corner inset
WorkOSAudit Harness: An Audit Trail for AI Coding Agents (No API Keys Required)
0:31
WorkOS Audit Harness: An Audit Trail for AI Coding Agents (No API Keys Required) at 1:14
WorkOSAudit Harness: An Audit Trail for AI Coding Agents (No API Keys Required)
1:14
WorkOS Audit Harness: An Audit Trail for AI Coding Agents (No API Keys Required) at 1:22
WorkOSAudit Harness: An Audit Trail for AI Coding Agents (No API Keys Required)
1:22
WorkOS Audit Harness: An Audit Trail for AI Coding Agents (No API Keys Required) at 1:26corner inset
WorkOSAudit Harness: An Audit Trail for AI Coding Agents (No API Keys Required)
1:26
WorkOS Audit Harness: An Audit Trail for AI Coding Agents (No API Keys Required) at 1:30corner inset
WorkOSAudit Harness: An Audit Trail for AI Coding Agents (No API Keys Required)
1:30
WorkOS Audit Harness: An Audit Trail for AI Coding Agents (No API Keys Required) at 1:34corner inset
WorkOSAudit Harness: An Audit Trail for AI Coding Agents (No API Keys Required)
1:34
WorkOS Audit Harness: An Audit Trail for AI Coding Agents (No API Keys Required) at 1:38corner inset
WorkOSAudit Harness: An Audit Trail for AI Coding Agents (No API Keys Required)
1:38
WorkOS Audit Harness: An Audit Trail for AI Coding Agents (No API Keys Required) at 1:42corner inset
WorkOSAudit Harness: An Audit Trail for AI Coding Agents (No API Keys Required)
1:42
WorkOS Audit Harness: An Audit Trail for AI Coding Agents (No API Keys Required) at 1:50corner inset
WorkOSAudit Harness: An Audit Trail for AI Coding Agents (No API Keys Required)
1:50
WorkOS Audit Harness: An Audit Trail for AI Coding Agents (No API Keys Required) at 1:54corner inset
WorkOSAudit Harness: An Audit Trail for AI Coding Agents (No API Keys Required)
1:54
WorkOS Audit Harness: An Audit Trail for AI Coding Agents (No API Keys Required) at 2:10corner inset
WorkOSAudit Harness: An Audit Trail for AI Coding Agents (No API Keys Required)
2:10
WorkOS Audit Harness: An Audit Trail for AI Coding Agents (No API Keys Required) at 2:46corner inset
WorkOSAudit Harness: An Audit Trail for AI Coding Agents (No API Keys Required)
2:46
WorkOS Audit Harness: An Audit Trail for AI Coding Agents (No API Keys Required) at 3:26corner inset
WorkOSAudit Harness: An Audit Trail for AI Coding Agents (No API Keys Required)
3:26
WorkOS Audit Harness: An Audit Trail for AI Coding Agents (No API Keys Required) at 4:02corner inset
WorkOSAudit Harness: An Audit Trail for AI Coding Agents (No API Keys Required)
4:02

Transkript von Audit Harness: An Audit Trail for AI Coding Agents (No API Keys Required)

Von einem Sprachmodell aus dem Ton des Films transkribiert, nicht von der Marke geschrieben. Klicke auf eine Zeile, um an diese Stelle zu springen.

  1. 0:01Audit Harness. 30 seconds then I build it in front of you. Who deleted that file on Friday night?
  2. 0:09Every company just hired a new class of Brulet user. Agents run shell commands and edit files
  3. 0:15with your engineer's credentials thousands of sessions a day. And when someone asks what an
  4. 0:20agent did on Friday night, the honest answer is today it's a JSON file on somebody's laptop.
  5. 0:28Rather than talking about that, let me just show you.
  6. 0:31This is Py, a small open source coding agent.
  7. 0:34It can read, write and delete files on this machine.
  8. 0:38Let's see what's watching.
  9. 0:40Nothing.
  10. 0:41Whatever it does next, there is no record of it anywhere I could query.
  11. 0:47One command.
  12. 0:49That's the whole integration.
  13. 0:51It hooks PySession, Prompt and Tool Lifecycle.
  14. 0:54and it's the same shared core the cloud code codex and open cloud plugins use.
  15. 0:59Run the list again.
  16. 1:01There it is.
  17. 1:02Let's make it do something real.
  18. 1:04Write me a file, a summary of coding I.
  19. 1:22there it is delete the golden eye file
  20. 1:31gone now ask who deleted so who deleted this file let's ask
  21. 1:35This console is altkit-gated and the model answers by querying the audit logs export
  22. 1:42API itself and citing the events.
  23. 1:45There it is, I wrote a file called goldeneyemd and then I deleted it just a few seconds ago.
  24. 1:55It all lands in WorkOS audit logs.
  25. 1:57Here is where all of that actually lives.
  26. 2:00One WorkOS organization holding every event you just watch it arrive.
  27. 2:06Org-scoped, schema-validated, exportable to your scene.
  28. 2:09Nothing on my laptop had a WorkOS key.
  29. 2:12And it must not because those keys are full access and there is no append-only scope.
  30. 2:17Instead, the laptop authenticates with a device certificate it already has.
  31. 2:23Cloudflare verifies it against RCA at the edge.
  32. 2:26so a certain request never reaches the worker.
  33. 2:30The worker resolves the serial to a real person,
  34. 2:34stamps the actor,
  35. 2:35and drops anything the client claimed about its own identity.
  36. 2:38The key exists only as a worker's secret.
  37. 2:42So why route through a proxy at all?
  38. 2:45Because it's the only thing that puts every harness your company runs,
  39. 2:49Cloud Code, Codex Pie, whatever ships next quarter,
  40. 2:52into one stream.
  41. 2:54And because MDM can push it,
  42. 2:56so coverage is enforced rather than opted into. Now the honest part, that event saying I deleted
  43. 3:02goldmd. The proxy proves it came from my laptop as me at the moment. It does not prove the file
  44. 3:09ever existed. I administered that machine so I can fabricate events and the certificate will
  45. 3:15happily sign them. That's structural. The answer is not to pretend otherwise, it is to reconcile
  46. 3:22against records i do not own one more thing for anyone here who built an agent product rather
  47. 3:29than running a fleet of them everything i just showed instruments the endpoint because that is
  48. 3:36what you can do without asking a vendor for anything if you are the vendor do it from your
  49. 3:42back end it already brokers the model call and runs the tools and a customer's developer cannot
  50. 3:50to read in and rewrite what your servers observed. Same vocabulary so the two halves reconcile
  51. 3:57against each other. One command on the endpoint, one trail for every agent your fleet runs,
  52. 4:04and a straight answer about what it proves. It's all open source. Check out the repository that
  53. 4:10contains plugins for Cloud Code, Codex, OpenCloud, and Pi.
53 Zeilen · 571 Wörter