notes from the gateway

Blog

How we keep AI agents away from real credentials, and what we learn building the gateway that does it.

Why permissions suck today

Most products don't offer permissions as fine-grained as agents need, and every product describes them in its own language. Learn once, use everywhere.

nikoz99Nov 11, 2026Read

Product
Your agent shouldn't hold your Linear key
A triage agent needs to file and update issues. Its API key can also delete every issue in the workspace. Here is how waterlock keeps the key out of the agent and the rules in your code.
Nov 11, 2026

notes from the gateway

Why permissions suck today

Your agent shouldn't hold your Linear key