Members-Only
Recent Talks & Demos are for members only
You must be an AI Tinkerers active member to view these talks and demos.
May 26, 2026
·
Tokyo
shisad: A Secure-by-Design Agent Framework
Learn how shisad addresses agentic security challenges, exploring research and a novel framework to build secure agents that execute intended actions reliably.
Overview
ShisaD started with a simple question: how hard would it be to build an actually secure version of OpenClaw? A few months (and hundreds of thousands of lines of code) later, the answer is… it’s really hard!
shiasd targets the lethal trifecta head on, with a huge security apparatus built so your agent does what you asked it to do, and not what an attacker, hallucination, or injected web page tries to redirect it toward.
Links
ShisaD provides secure LLM orchestration via sandboxed, intent-grounded tool execution.
Tech stack
- PythonPython: The high-level, general-purpose language built for readability, powering everything from web backends to advanced machine learning models.Python is the high-level, general-purpose language prioritizing clear, readable syntax (via significant indentation), ensuring rapid development for any team . Its ecosystem is massive: use it for robust web development with frameworks like Django and Flask, or leverage its power in data science with libraries such as Pandas and NumPy . The Python Package Index (PyPI) provides thousands of community-contributed modules, offering immediate solutions for tasks from network programming to GUI creation . The language is actively maintained by the Python Software Foundation (PSF), with the stable release currently at Python 3.14.0 (as of November 2025) .
- Claude CodeAnthropic's agentic coding tool: Unleash Claude's raw power directly in your terminal or IDE to turn complex, hours-long workflows into a single command.Claude Code is Anthropic’s powerful agentic coding assistant, designed for high-velocity development. It operates natively within your terminal, IDE (VS Code, JetBrains), or via a web interface, allowing you to delegate complex tasks like feature building, bug fixing, and codebase navigation. The agent plans, edits files, executes commands, and creates commits, maintaining awareness of your entire project structure. Internally, Anthropic engineers using Claude Code reported a 67% increase in productivity, demonstrating its capacity to deliver significant gains for Pro and Max plan users.
- OpenAI CodexOpenAI Codex is a cloud-based AI agent that autonomously writes, debugs, tests, and proposes pull requests for software development workflows.Codex is a powerful, cloud-based software engineering agent, powered by the specialized codex-1 model (a derivative of the GPT architecture). It streamlines the development lifecycle by autonomously handling complex tasks: writing new features, debugging code, running tests, and generating pull requests directly to a GitHub repository. Operating in a secure, isolated sandboxed environment, Codex ensures reproducible changes and can process multiple tasks in parallel, a key differentiator from sequential human workflows. Developers interact with it through the ChatGPT interface or the Codex CLI, delegating work in plain English (e.g., 'Find and fix a bug where the jump search algorithm doesn't handle empty arrays') to accelerate shipping and improve team productivity.
- MCPMCP is the open-source standard for securely connecting AI agents (like LLMs) to external tools, data, and enterprise workflows.The Model Context Protocol (MCP) functions as a standardized integration layer: think of it as a USB-C port for AI applications. Developed and open-sourced by Anthropic, this protocol allows large language models (LLMs) to access real-time context and execute actions via external tools like GitHub, Jira, or proprietary databases . It uses a simple JSON-RPC interface to define tools, schemas, and endpoints, which enables AI agents to perform complex, state-changing tasks—such as creating a GitHub issue or running a test script—rather than just generating text . MCP is essential for building agentic AI systems that can autonomously pursue goals and operate within defined safety and permission boundaries .
- PromptGuard 2A high-precision, multilingual classifier designed to intercept prompt injections and jailbreak attempts before they reach your LLM.PromptGuard 2 is Meta's latest evolution in LLM security, offering a specialized defense layer built on the DeBERTa architecture. This update introduces two distinct models: a high-performance 86M parameter version and a lightweight 22M parameter variant that slashes compute costs by 75% for latency-sensitive applications. By utilizing a custom energy-based loss function and adversarial-resistant tokenization, the system effectively neutralizes complex threats like DAN-style jailbreaks and whitespace manipulation across eight major languages. It functions as a standalone firewall, allowing developers to filter malicious inputs at the edge of their pipeline without compromising the primary model's core utility.
Finding related talks...
Compose Email
Sending...
Email preview
Loading recent emails...