Open Source Summit + Embedded Linux Conference North America 2026

Your AI agents can read your code, call external APIs, and hold credentials to production. Your security controls assume they're either a human or a deterministic app. They're neither.

I'll walk through the patterns enterprise teams are actually using to deploy coding agents without getting burned: workspace isolation, network egress controls, model gateways, and credentials that die when the workspace dies.
Real incidents. Real deployments. No hand-waving about what might work someday.


**In order to facilitate networking and business relationships at the event, you may choose to visit a third party’s booth or access sponsored content. You are never required to visit third party booths or to access sponsored content. When visiting a booth or participating in sponsored activities, the third party will receive some of your registration data. This data includes your first name, last name, title, company, address, email, standard demographics questions (i.e. job function, industry), and details about the sponsored content or resources you interacted with. If you choose to interact with a booth or access sponsored content, you are explicitly consenting to receipt and use of such data by the third-party recipients, which will be subject to their own privacy policies.**