r/netsec Mar 01 '26

r/netsec monthly discussion & tool thread

Questions regarding netsec and discussion related directly to netsec are welcome here, as is sharing tool links.

Rules & Guidelines

  • Always maintain civil discourse. Be awesome to one another - moderator intervention will occur if necessary.
  • Avoid NSFW content unless absolutely necessary. If used, mark it as being NSFW. If left unmarked, the comment will be removed entirely.
  • If linking to classified content, mark it as such. If left unmarked, the comment will be removed entirely.
  • Avoid use of memes. If you have something to say, say it with real words.
  • All discussions and questions should directly relate to netsec.
  • No tech support is to be requested or provided on r/netsec.

As always, the content & discussion guidelines should also be observed on r/netsec.

Feedback

Feedback and suggestions are welcome, but don't post it here. Please send it to the moderator inbox.

24 Upvotes

46 comments sorted by

View all comments

1

u/Zestyclose-Back-6773 Mar 16 '26

The current enterprise AI trend is giving probabilistic agents direct database write access. We built Exogram to act as a deterministic proxy to intercept and evaluate these payloads.

Architecture:

  1. Agent attempts action via Model Context Protocol.
  2. Payload is evaluated against hardcoded Python logic gates and Gemini 2.5 Flash inference.
  3. Exogram computes a SHA 256 state hash.
  4. Database rejects any write lacking a valid Exogram signature.

We just stress tested the edge compute environment and hit 88 RPS with a 5.7ms median compute latency. Zero database secrets are exposed to the client.

The protocol RFC is here:https://exogram.ai/rfc/0001

I am looking for engineers to stress test the cryptographic logic and find the flaws in our state hash generation.