// AGENTLOCK JOURNAL
Security notes for autonomous agents
Practical writing on agent approvals, credential isolation, auditability, and the operating model behind safer automation.
Security
How to Keep API Keys Out of Your AI Agents' Hands
Every key an AI agent can read is a key it can leak. Why credentials don't belong in prompts or agent environments — and how the gateway pattern fixes it.
Read article →
Operations
Human-in-the-Loop for AI Agents, Without the Bottleneck
Full autonomy is reckless, approving everything is unusable. How to risk-tier agent actions and design approvals that take seconds, not meetings.
Read article →
Compliance
AI Agent Audit Trails: What to Log, a Template and the EU AI Act
What an AI agent audit trail must record, a record template to copy, the logging duty in Article 12 of the EU AI Act — and three examples from practice.
Read article →