<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:itunes="http://www.itunes.com/dtds/podcast-1.0.dtd" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Runtime AI Security</title>
    <link>https://verifyclaw.io/blog/</link>
    <atom:link href="https://verifyclaw.io/blog/feed.xml" rel="self" type="application/rss+xml"/>
    <description>A defensive discussion of sandbox boundaries, zero trust, runtime evidence, and secure AI-agent execution, following the book Zero Trust and Sandbox Isolation: A Red-Team Perspective. Across five episodes a host and a security expert work through the manuscript in order, from the core thesis that author trust and technical isolation are orthogonal, through the catalogue of trust-exploitation attack vectors, the defensive probes that validate a boundary, and the thirteen-principle secure boundary model.</description>
    <language>en-US</language>
    <lastBuildDate>Sun, 02 Aug 2026 19:27:31 +0000</lastBuildDate>
    <itunes:author>VerifyClaw.io</itunes:author>
    <itunes:owner><itunes:name>AdaBoost AI</itunes:name><itunes:email>suvasis@adaboostai.com</itunes:email></itunes:owner>
    <itunes:category text="Technology"/>
    <itunes:explicit>false</itunes:explicit>
    <itunes:image href="https://f004.backblazeb2.com/file/Podcast-verifyclaw/sandbox/zero-trust/book_thumbnail.png"/>
    <image><url>https://f004.backblazeb2.com/file/Podcast-verifyclaw/sandbox/zero-trust/book_thumbnail.png</url><title>Runtime AI Security</title><link>https://verifyclaw.io/blog/</link></image>
    <item>
      <title>Why Trusted Authors Are Not Safe Code</title>
      <link>https://verifyclaw.io/blog/why-trusted-authors-are-not-safe-code.html</link>
      <guid isPermaLink="false">https://verifyclaw.io/blog/why-trusted-authors-are-not-safe-code.html</guid>
      <pubDate>Sun, 02 Aug 2026 19:27:31 +0000</pubDate>
      <description><![CDATA[The opening episode of Runtime AI Security introduces Zero Trust and Sandbox Isolation and its central thesis: author trust is an identity concept, sandbox isolation is a technical one, and conflating them is a policy failure on the host. The host and expert unpack what a sandbox actually is, why cryptographic signatures verify origin but never behavior, how NIST's zero trust framing applies to third-party code, and why an agent's blast radius includes everything it can write that the host later trusts.]]></description>
      <enclosure url="https://f004.backblazeb2.com/file/Podcast-verifyclaw/sandbox/zero-trust/episode-01-why-trusted-authors-are-not-safe-code/audio.mp3" length="16869293" type="audio/mpeg"/>
      <itunes:title>Why Trusted Authors Are Not Safe Code</itunes:title>
      <itunes:author>VerifyClaw.io</itunes:author>
      <itunes:summary><![CDATA[The opening episode of Runtime AI Security introduces Zero Trust and Sandbox Isolation and its central thesis: author trust is an identity concept, sandbox isolation is a technical one, and conflating them is a policy failure on the host. The host and expert unpack what a sandbox actually is, why cryptographic signatures verify origin but never behavior, how NIST's zero trust framing applies to third-party code, and why an agent's blast radius includes everything it can write that the host later trusts.]]></itunes:summary>
      <itunes:duration>17:34</itunes:duration>
      <itunes:episode>1</itunes:episode>
      <itunes:season>1</itunes:season>
      <itunes:episodeType>full</itunes:episodeType>
      <itunes:explicit>false</itunes:explicit>
      <itunes:image href="https://f004.backblazeb2.com/file/Podcast-verifyclaw/sandbox/zero-trust/book_thumbnail.png"/>
    </item>
    <item>
      <title>Jumping the Sandbox Without Touching It</title>
      <link>https://verifyclaw.io/blog/jumping-the-sandbox-without-touching-it.html</link>
      <guid isPermaLink="false">https://verifyclaw.io/blog/jumping-the-sandbox-without-touching-it.html</guid>
      <pubDate>Sun, 02 Aug 2026 19:27:31 +0000</pubDate>
      <description><![CDATA[A defensive walk through the manuscript's attack-vector taxonomy, focused on adversaries who target trust signals instead of the sandbox itself. Covers trusted publisher certificate abuse, reputation-based privilege escalation and sock puppet farming, account takeover, and compromised build pipelines, with SolarWinds Orion and SUNBURST as the canonical case.]]></description>
      <enclosure url="https://f004.backblazeb2.com/file/Podcast-verifyclaw/sandbox/zero-trust/episode-02-jumping-the-sandbox-without-touching-it/audio.mp3" length="15849473" type="audio/mpeg"/>
      <itunes:title>Jumping the Sandbox Without Touching It</itunes:title>
      <itunes:author>VerifyClaw.io</itunes:author>
      <itunes:summary><![CDATA[A defensive walk through the manuscript's attack-vector taxonomy, focused on adversaries who target trust signals instead of the sandbox itself. Covers trusted publisher certificate abuse, reputation-based privilege escalation and sock puppet farming, account takeover, and compromised build pipelines, with SolarWinds Orion and SUNBURST as the canonical case.]]></itunes:summary>
      <itunes:duration>16:31</itunes:duration>
      <itunes:episode>2</itunes:episode>
      <itunes:season>1</itunes:season>
      <itunes:episodeType>full</itunes:episodeType>
      <itunes:explicit>false</itunes:explicit>
      <itunes:image href="https://f004.backblazeb2.com/file/Podcast-verifyclaw/sandbox/zero-trust/book_thumbnail.png"/>
    </item>
    <item>
      <title>Impersonation, Time Bombs, and Legal Loopholes</title>
      <link>https://verifyclaw.io/blog/impersonation-time-bombs-and-legal-loopholes.html</link>
      <guid isPermaLink="false">https://verifyclaw.io/blog/impersonation-time-bombs-and-legal-loopholes.html</guid>
      <pubDate>Sun, 02 Aug 2026 19:27:31 +0000</pubDate>
      <description><![CDATA[The second half of the attack-vector chapter covers the subtler manipulations of trust: homoglyph and typosquatting impersonation, fabricated and synthetic endorsements, delayed payloads that wait for trust to go stale, governance attacks laundered through community votes, liability-shifting legal clauses aimed at automated risk scorers, signature scope gaps, and malicious transitive dependencies. The expert frames each vector as evidence that every trust signal is forgeable, and that isolation must never depend on one.]]></description>
      <enclosure url="https://f004.backblazeb2.com/file/Podcast-verifyclaw/sandbox/zero-trust/episode-03-impersonation-time-bombs-and-legal-loopholes/audio.mp3" length="16608487" type="audio/mpeg"/>
      <itunes:title>Impersonation, Time Bombs, and Legal Loopholes</itunes:title>
      <itunes:author>VerifyClaw.io</itunes:author>
      <itunes:summary><![CDATA[The second half of the attack-vector chapter covers the subtler manipulations of trust: homoglyph and typosquatting impersonation, fabricated and synthetic endorsements, delayed payloads that wait for trust to go stale, governance attacks laundered through community votes, liability-shifting legal clauses aimed at automated risk scorers, signature scope gaps, and malicious transitive dependencies. The expert frames each vector as evidence that every trust signal is forgeable, and that isolation must never depend on one.]]></itunes:summary>
      <itunes:duration>17:18</itunes:duration>
      <itunes:episode>3</itunes:episode>
      <itunes:season>1</itunes:season>
      <itunes:episodeType>full</itunes:episodeType>
      <itunes:explicit>false</itunes:explicit>
      <itunes:image href="https://f004.backblazeb2.com/file/Podcast-verifyclaw/sandbox/zero-trust/book_thumbnail.png"/>
    </item>
    <item>
      <title>Attaching as a Callee: Defensive Probes</title>
      <link>https://verifyclaw.io/blog/attaching-as-a-callee-defensive-probes.html</link>
      <guid isPermaLink="false">https://verifyclaw.io/blog/attaching-as-a-callee-defensive-probes.html</guid>
      <pubDate>Sun, 02 Aug 2026 19:27:31 +0000</pubDate>
      <description><![CDATA[Episode four turns from attack to defense. We walk through the book's third chapter, where security testers attach probes directly to the sandbox, the trust verification system, the application, and the policy engine. The core insight: the real subject of the test is not whether the sandbox works, but whether the host's policy engine can be talked into switching it off. We cover zero-trust enforcement probes, trust score isolation, behavioral change monitoring, compromise and impersonation detection, build pipeline integrity with hardware-backed attestation, dependency namespace isolation, time-aware trust validation, decoy trust manipulation, the trust boundary fuzzer, policy guards against permanent allow, score transparency, continuous behavioral scoring, and incident response hooks.]]></description>
      <enclosure url="https://f004.backblazeb2.com/file/Podcast-verifyclaw/sandbox/zero-trust/episode-04-attaching-as-a-callee-defensive-probes/audio.mp3" length="16673270" type="audio/mpeg"/>
      <itunes:title>Attaching as a Callee: Defensive Probes</itunes:title>
      <itunes:author>VerifyClaw.io</itunes:author>
      <itunes:summary><![CDATA[Episode four turns from attack to defense. We walk through the book's third chapter, where security testers attach probes directly to the sandbox, the trust verification system, the application, and the policy engine. The core insight: the real subject of the test is not whether the sandbox works, but whether the host's policy engine can be talked into switching it off. We cover zero-trust enforcement probes, trust score isolation, behavioral change monitoring, compromise and impersonation detection, build pipeline integrity with hardware-backed attestation, dependency namespace isolation, time-aware trust validation, decoy trust manipulation, the trust boundary fuzzer, policy guards against permanent allow, score transparency, continuous behavioral scoring, and incident response hooks.]]></itunes:summary>
      <itunes:duration>17:22</itunes:duration>
      <itunes:episode>4</itunes:episode>
      <itunes:season>1</itunes:season>
      <itunes:episodeType>full</itunes:episodeType>
      <itunes:explicit>false</itunes:explicit>
      <itunes:image href="https://f004.backblazeb2.com/file/Podcast-verifyclaw/sandbox/zero-trust/book_thumbnail.png"/>
    </item>
    <item>
      <title>The Secure Boundary Model and Its Thirteen Principles</title>
      <link>https://verifyclaw.io/blog/the-secure-boundary-model-and-its-thirteen-principles.html</link>
      <guid isPermaLink="false">https://verifyclaw.io/blog/the-secure-boundary-model-and-its-thirteen-principles.html</guid>
      <pubDate>Sun, 02 Aug 2026 19:27:31 +0000</pubDate>
      <description><![CDATA[The final episode of Runtime AI Security assembles the defensive architecture from Zero Trust and Sandbox Isolation: thirteen principles anchored in a zero-trust baseline, per-session permissions, behavioral trust over reputation, cryptographic supply chain verification with hardware-backed attestation, incident response and tamper-evident auditing, and continuous red-teaming. It closes with the book's central thesis that the security boundary must be anchored in what code does, not in who wrote it.]]></description>
      <enclosure url="https://f004.backblazeb2.com/file/Podcast-verifyclaw/sandbox/zero-trust/episode-05-the-secure-boundary-model-and-its-thirteen-principles/audio.mp3" length="18735063" type="audio/mpeg"/>
      <itunes:title>The Secure Boundary Model and Its Thirteen Principles</itunes:title>
      <itunes:author>VerifyClaw.io</itunes:author>
      <itunes:summary><![CDATA[The final episode of Runtime AI Security assembles the defensive architecture from Zero Trust and Sandbox Isolation: thirteen principles anchored in a zero-trust baseline, per-session permissions, behavioral trust over reputation, cryptographic supply chain verification with hardware-backed attestation, incident response and tamper-evident auditing, and continuous red-teaming. It closes with the book's central thesis that the security boundary must be anchored in what code does, not in who wrote it.]]></itunes:summary>
      <itunes:duration>19:31</itunes:duration>
      <itunes:episode>5</itunes:episode>
      <itunes:season>1</itunes:season>
      <itunes:episodeType>full</itunes:episodeType>
      <itunes:explicit>false</itunes:explicit>
      <itunes:image href="https://f004.backblazeb2.com/file/Podcast-verifyclaw/sandbox/zero-trust/book_thumbnail.png"/>
    </item>
  </channel>
</rss>