Agent chassis security: are your controls keeping up with AI agents?

TL;DR: AI agents still run inside a deterministic chassis that mediates secrets, network calls, audit logs, and policy enforcement, according to 1Password, which argues the security boundary must stay outside the model context. That makes runtime control, not model trust, the governing problem for IAM and NHI teams.

NHIMG editorial — based on content published by 1Password: agent chassis security and the role of the deterministic runtime for AI agents

Questions worth separating out

Q: How should security teams govern AI agents that use browser, CLI, and IDE workflows?

A: Security teams should govern them as runtime-mediated identities, not as ordinary user sessions.

Q: Why do AI agents change NHI security assumptions?

A: AI agents change the assumption that the client is passive.

Q: What breaks when secrets are exposed to the AI context?

A: The main failure is that the AI layer becomes part of the trust boundary.

Practitioner guidance

• Map the real enforcement boundary Inventory where secret retrieval, request approval, and audit logging actually happen in agent workflows.
• Treat agent-driven access as an NHI class Assign agent sessions, service accounts, and API-backed tooling to explicit identity categories so policy can distinguish human use from machine use at execution time.
• Remove secrets from prompts and local context Use vault-backed injection, SDK-mediated retrieval, and environment controls that prevent secrets from appearing in shell history, files, or model memory.

What's in the full article

1Password's full post covers the operational detail this analysis intentionally leaves for the source:

• How 1Password embeds security into browser, CLI, and IDE workflows for developer and agent use cases
• The Browserbase and director.ai headless browsing example that shows how vault-backed access works in practice
• The SDK and service-account patterns used to avoid hardcoded secrets in automation
• The vendor's explanation of why the browser remains the chassis while the vault remains the source of truth

👉 Read 1Password's analysis of agent chassis security for AI workflows →

Agent chassis security: are your controls keeping up with AI agents?

Explore further

View Full Forum →  |  NHI Foundation Course →