Oliver Grant
Security Engineer
Product & Engineering
“An agent with credentials is a user. We just never onboarded it like one.”
Oliver is responsible for how Assembly handles what it records — scoping, retention, and the parts auditors ask about.
He writes about the overlap between agent observability and identity, and what it means that most agents act with a person’s permissions.
Written by Oliver Grant
Field Notes
An agent with credentials is a user
We onboard employees carefully and agents not at all. That asymmetry is the security story of the next two years.
1 min read
Field Notes
Scope minimisation is a design constraint, not a policy
What Assembly records, what it does not, and why the second list is deliberate.
1 min read