Zero-Secret Architecture Lets AI Agents Access Systems Without Handling Credentials

·1 views

A sysadmin and solutions architect has proposed a security pattern that prevents AI agents from ever accessing raw passwords, API tokens, or SSH keys when interacting with internal infrastructure. The approach shifts secret ownership to a Model Context Protocol (MCP) server backed by HashiCorp Vault, where the agent only works with short logical identifiers rather than actual credentials. The MCP container authenticates to Vault independently, retrieves credentials in memory, and returns only the operational result to the agent. Access is further restricted through scoped action policies, meaning Vault can deny tool execution even if the tool exists within the container. Mutating actions also require explicit human confirmation, adding an additional layer of oversight before any system state is changed.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Visual Regression Testing Uses Screenshot Diffing to Catch Silent Layout Breaks

Visual regression testing compares screenshots of a webpage taken before and after an update to detect layout changes that produce no errors or logs. Unlike traditional error monitoring, this method catches issues caused by CSS conflicts, font overrides, or class name clashes that can break a site's appearance without triggering any alerts. A naive pixel-by-pixel comparison proves unreliable due to rendering jitter and dynamic content, so a two-layer tolerance system is used instead — filtering minor per-pixel brightness differences and only flagging changes when more than 8% of the frame is affected. This threshold is deliberately high enough to ignore localized dynamic content like rotating banners while still catching large structural layout breaks. The approach was refined further following a real production incident, underscoring that robust visual testing requires careful calibration rather than simple pixel matching.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer Builds Browser-Based Random Chat App With Real-Time Language Translation

A solo developer has built Veilr, a random video, voice, and text chat platform designed to overcome language barriers between strangers matched online. The app translates text messages into a recipient's language before delivery and generates live translated captions during voice and video calls using speech-to-text service Soniox. Veilr runs in browsers across 16 interface languages and on Android, with Gemini handling text translation and a WebSocket-plus-Redis architecture keeping messages and signalling in sync across servers. Users retain control over captions — the listener activates them — and the app discloses when microphone audio is being streamed to a third-party provider as a result. The project was built without microservices or queue brokers, using Node, React, and Capacitor, and launched after the closure of Omegle in 2023, which inspired its core concept.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer Builds Green PHP Framework From Personal Experiment to Production Use

A developer named Yasser El-Gammal created Green, a PHP framework that began as a personal experiment to better understand how frameworks work under the hood. Starting with basic routing and database access, the project gradually expanded to include middleware, authentication, sessions, caching, testing, and other features. The framework has seen 22 releases since April 2026, averaging roughly one release per week, with ongoing refactoring focused on simplicity and maintainability rather than just adding features. A significant turning point came when Green was deployed in a real production environment, which prompted the developer to revisit and simplify several design decisions. Green remains a work in progress, and its source code and documentation are publicly available on GitHub.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Thai AI Models Outperform Foreign Rivals on Local Language and Legal Tasks

A September 2026 analysis by developer Nokka examines where Thai-built AI models hold a genuine edge over global counterparts and where they fall short. Thai models trained on local data perform better at reading handwritten Thai documents, citing specific legal statutes, recognising regional dialects such as Isan speech, and interpreting cultural idioms. However, they lag behind leading foreign models in complex multi-step reasoning, advanced code generation, and broad general knowledge, largely because Thai models currently range from 7 billion to 72 billion parameters while top global models reach into the hundreds of trillions. The author attributes this structural gap to the prohibitive cost of training large-scale models, which requires tens of thousands of GPUs beyond the reach of most Thai teams. The practical recommendation is a hybrid approach — using Thai models for language- and culture-specific tasks while relying on foreign models where maximum reasoning capability is required.

0 comments Read more at DEV Community