Hardening

A human pentester gets tired, breaks for lunch, eventually gives up. An LLM-driven agent does none of that: it loops around the clock, draws no salary, and costs less every year. Against that adversary two mechanisms combine — decoys written for a reader that is a machine, and a maze of virtual machines that turns every hour of attack into pure expenditure. This article details both, and the four limits to state before any deployment.

Targeted attack-surface reduction for Claude Desktop. Simple principle: it’s a chat assistant, not a system agent. The list of NOs, the list of OKs, and a 30-minute checklist.