Latest / Big Iron Radio / Homelab Brief - Safe Agent Writes: Approval Gates and Action Ledgers

Transcript

Homelab Brief - Safe Agent Writes: Approval Gates and Action Ledgers · Big Iron Radio

• 0:02
  Welcome to the Homelab Brief from Big Iron.
• 0:06
  Today, how to let an AI agent make changes to your Homelab
• 0:11
  without letting it run wild the right path pattern.
• 0:14
  Quick note, this is an AI voice drawn from a Big Iron guide.
• 0:18
  Links below.
• 0:20
  The mental model.
• 0:22
  Treat a right capable agent like a new hire
• 0:24
  you don't fully trust yet.
• 0:26
  You don't hand them root on day one.
• 0:29
  You make them propose, you review, then you apply.
• 0:32
  Three stages, never one.
• 0:34
  Concretely, every mutating tool should default
• 0:38
  to a dry run and return a diff.
• 0:40
  Here's exactly what I would change.
• 0:42
  A separate, explicitly authorized code path
• 0:45
  is the only thing that performs the real apply.
• 0:48
  The agent proposes.
• 0:50
  A different door commits.
• 0:52
  Now the subtle bug that breaks naive versions of this.
• 0:56
  Bind the approval token to a hash of the specific diff content,
• 0:59
  not to a call ID.
• 1:01
  Otherwise, the agent can regenerate a different plan
• 1:04
  and ride in on your stale approval.
• 1:07
  You approved that change the exact bytes of it not,
• 1:10
  whatever the agent does next.
• 1:12
  Make the human step livable.
• 1:15
  Route approvals through something like self-hosted NTFY,
• 1:18
  with action buttons approve or deny from your phone,
• 1:21
  and keep the token time to live sane, 15 to 30 minutes.
• 1:26
  Too long invites bypass.
• 1:28
  Too short trains you to rubber stamp.
• 1:30
  Both failure modes are real.
• 1:33
  And keep the receipts.
• 1:35
  In append-only, off-box, filesystem-hardened action ledger
• 1:39
  that links every propose, approve, and apply event by diff hash.
• 1:43
  When something goes wrong, that ledger is your only real post-mortem tool.
• 1:47
  Pair it with idempotent apply functions so a retry can't double apply.
• 1:52
  The full pattern's in the show notes.
• 1:55
  That's your brief.