<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
  <title>Alex Vazquez - thoughts</title>
  <link>https://alexvazquez.xyz</link>
  <atom:link href="https://alexvazquez.xyz/feed.xml" rel="self" type="application/rss+xml"/>
  <description>Enterprise infrastructure security at Snap. Previously Security at Microsoft. Focused on securing AI in the corporate environment, plus data loss prevention, governance and zero trust. I build open-source tooling for the same problems.</description>
  <language>en</language>
  <item>
    <title>Sandboxes do not work for corporate AI agents</title>
    <link>https://alexvazquez.xyz/thoughts/policy-enforcement-over-sandboxing/</link>
    <guid isPermaLink="true">https://alexvazquez.xyz/thoughts/policy-enforcement-over-sandboxing/</guid>
    <pubDate>Tue, 03 Nov 2026 00:00:00 GMT</pubDate>
    <description>A sandbox cannot hold the work a company needs from an agent, so we enforce policy at the point of use instead.</description>
  </item>
  <item>
    <title>Failure modes in multi-agent orchestration</title>
    <link>https://alexvazquez.xyz/thoughts/multi-agent-orchestration/</link>
    <guid isPermaLink="true">https://alexvazquez.xyz/thoughts/multi-agent-orchestration/</guid>
    <pubDate>Mon, 03 Aug 2026 00:00:00 GMT</pubDate>
    <description>What makes a fleet of coding agents beat a single one, and where the fleet quietly fails.</description>
  </item>
  <item>
    <title>AI processes need their own DLP</title>
    <link>https://alexvazquez.xyz/thoughts/ai-risk-and-dlp/</link>
    <guid isPermaLink="true">https://alexvazquez.xyz/thoughts/ai-risk-and-dlp/</guid>
    <pubDate>Tue, 12 May 2026 00:00:00 GMT</pubDate>
    <description>A coding agent acts with your credentials, so data loss prevention has to run on the machine where the agent runs.</description>
  </item>
</channel>
</rss>
