dex· @dexhorthy · X·· 3 小时前AI 评分48
AI 导读
Agent Baseline 发布首份《软件工厂参考架构》草案，面向日益自主的软件开发流程给出安全蓝图，由社区多方共同构建，现已开放反馈与贡献。该草案的讨论起点是如何在给开发者开放 MCP 等上下文工具（工单、邮件、Slack）的同时，防范数据外泄、提示词注入和凭证劫持等问题，此前只有模糊的"MCP 网关"设想，如今被落实为面向构建者的正式规范。
正文
a couple months back i was on a pod with @vtahowe and @ianlivingstone chatting w/ a Billions-of-market-cap CISO about how to balance giving developers tools to make coding agents useful (think, mcps to all kinds of useful context link ticketing, email, slack etc) while avoiding data exfiltration, prompt injection, credential hijacks, etc. There was some hand-wavy "mcp gateway" talk but really cool to see this important question materialized into a formal spec for builders.
There's a lot more to build here, but this is a great start
Today we're publishing the first draft of the Agent Baseline Software Factory Reference Architecture! An opinionated blueprint for securing increasingly autonomous software factories, built with folks across the community. It's open for feedback and contributions! https://agentbaseline.org/reference-architecture在 X 查看被引用的帖子
来源：dex · x.com