What I contributed to the OpenSSF guide on finding and fixing vulnerabilities using AI, and why evidence and execution boundaries matter.
Software, security, systems, music.
Robert Ryan Jennings
Web logs of a software development engineer, musician, artist and hockey player.
Essays on software engineering, mobile and backend security, architecture, older systems, and the occasional adjacent obsession.
Content expressed is my own and does not reflect the opinions of any entity.
Featured Essay
Contributing to OpenSSF's Guide on AI-Assisted Vulnerability Discovery
Browse the Archive
Explore by Topic
Popular Categories
Latest Entries
Recent Writing
Contributing to OpenSSF's Guide on AI-Assisted Vulnerability Discovery
Nov 5, 2026 12:00AM
5 min read
996 words
Reflections on my OpenSSF guide contributions: independent verification, agent isolation, untrusted memory, evidence, and authorization.
The Envelope: Contracts and Trust Boundaries for Agentic AI
Nov 5, 2026 12:00AM
19 min read
4007 words
An office-envelope analogy for keeping AI planning, policy authorization, execution, and audit evidence separate.