We recreated a bank permission flaw in Northline, our working bank with fictional customers. An AI agent reached private records. The report shows exactly how they were exposed, then what happened when we fixed the flaw and attacked again: zero private records exposed.
Read the investigationWe follow agent actions from the instruction a person gave to the effect a system recorded. Each research note shows the control question, the evidence, and what the result means for teams shipping agents.
Composio Shared Connections · Technical case study
A user lost access to a shared GitHub connection. New sessions and native tools enforced the removal, but a retained session’s proxy still read a private repository and created issues.
Mastra Agent Controller · Technical case study
A schema rejected a change from deny to allow, yet the live session adopted it and ran the tool. A fresh control, direct handler test, and local repair trace the failure.
assistant-ui · Merged upstream fix
A mounted AI SDK thread list kept showing the old workspace after a switch. A pinned A/B reproduction, local repair, and merged PR trace the missing reload and its controls.
Six Meta Muse research submissions
A research family follows approval through scheduled work, connected identity, destination, and recurring execution.
Six Google VRP research submissions
Research across workspace context, hosted sessions, retained state, and tool routing asks which authority reached the final action.
Vercel Workflow · Technical case study
A protected workflow imported a strict policy, but a shared step ID selected a public peer variant. Five controlled runs and a local repair trace the result.
Four fixes across OpenDots and OpenMuse
Four maintainer-reviewed fixes carry human control through cancellation, desktop retries, scheduled recovery, and reviewed saves in CopilotKit’s OpenDots and OpenMuse.
Bring us the workflow that matters to your next release or customer. We trace the action to the system that received it, show what happened, and help your engineers verify the change.
48-hour Rapid Scan