Open Source Summit + Embedded Linux Conference North America 2026

The transition from passive RAG to autonomous agentic workflows forces a dangerous trade-off: to be useful, agents need access; to be safe, they need restrictions. Giving a non-deterministic LLM distinct permissions to your Kubernetes cluster is a security nightmare, yet agentic tool execution demands real-world access to be effective.

This session introduces a battle-tested architecture for Zero Trust Agents. We will demonstrate how to secure Model Context Protocol (MCP) servers within private networks, replacing risky static credentials with a dynamic control plane that enforces strict safety guardrails.

Attendees will learn:

Identity for Autonomy: How to integrate OpenBao (OpenSSF) to issue Just-In-Time (JIT) credentials, ensuring agents only hold permissions during active tool use.

Bounding Agency: Implementing "Read/Write Separation" at the protocol level, preventing stochastic errors or misinterpretations from causing deterministic outages.

Secure Orchestration: A blueprint for deploying MCP servers as secure bridges between AI reasoning and internal infrastructure.

Stop building toys. Learn how to deploy autonomous systems that your security team will actually approve.