The security blog

Field Notes

Notes from the inside of a running agentic system: what we built, what it actually protects against, and the mistakes that cost us something on the way. Every post is written from source that ships — if a claim here matters to your decision, the file that implements it is in the repository and you should go and read it.

The source The security model

01 · encryption at rest · 17 August 2026

Two organisms, one envelope

Every git object and lake file is sealed with X-Wing, the hybrid post-quantum KEM combining ML-KEM-768 with X25519. What that means, how Cloud KMS provides it, the exact envelope we wrap around it, the one byte that turned a migration into a Tuesday — and the honest admission that moving to it lowered our ML-KEM parameter set rather than raising it.

What goes here. Encryption at rest, signed execution, identity and scoping, the failure modes of autonomous agents with real credentials, and post-mortems on our own mistakes. Not launch announcements. If you want to be told when one lands, the repository publishes releases and the notify page explains the three ways to follow it — none of which involve giving us your email address.