https://miasyster.github.io/en/tags/security/Recent content in Security on AI + Quant EngineeringHugoenFri, 01 May 2026 00:00:00 +0000https://miasyster.github.io/en/posts/harness-is-governance/Fri, 01 May 2026 00:00:00 +0000https://miasyster.github.io/en/posts/harness-is-governance/The mainstream approach to Agent governance is writing rules in prompts. But LLMs can ignore prompts. Real governance lives outside the Agent, in the Harness layer — tools define what’s possible, errors define what’s forbidden, code defines where the boundaries are.https://miasyster.github.io/en/posts/expression-parser-is-a-compiler/Wed, 29 Apr 2026 00:00:00 +0000https://miasyster.github.io/en/posts/expression-parser-is-a-compiler/QuantGPT’s core is an 870+ line hand-written recursive descent parser supporting 80+ operators, automatic cross-sectional/time-series grouping, and dual-mode compilation. Not because I didn’t know eval() is simpler — but because what eval() can’t do happens to be what matters most.https://miasyster.github.io/en/posts/api-guard-pattern/Tue, 28 Apr 2026 00:00:00 +0000https://miasyster.github.io/en/posts/api-guard-pattern/QuantGPT uses threading.local to enforce a runtime guard: all backtest calls must go through the API boundary. Direct function calls raise an exception. Not because the function is dangerous — but because a system without boundaries can’t be audited.https://miasyster.github.io/en/posts/sandbox-defense-in-depth/Fri, 03 Apr 2026 00:00:00 +0000https://miasyster.github.io/en/posts/sandbox-defense-in-depth/AI-generated code must be executed — otherwise it’s just text. But execution means risk. I didn’t choose container isolation or RestrictedPython. Instead I designed a three-layer defense: reject dangerous structures at compile time via AST, replace the entire builtins at runtime, and enforce OS-level resource limits as a backstop. Each layer handles a different class of risk. Overlapping but not redundant.