{R}R 開発ノート


合計 16 件の記事が見つかりました。

OpenClaw Engineering, Chapter 13: Hardening the Ecosystem

The final chapter: ecosystem security, the ClawHavoc incident, defending against malware in dependencies, confirming high-risk operations, and building auditing and disaster recovery systems.
2026-03-28

OpenClaw Engineering, Chapter 12: The Agentic Zero-Trust Architecture

Zero-trust security for autonomous agents: managing blast radius, implementing three-tier defense (pre-action, in-action, post-action), container isolation, and defending against indirect prompt injection attacks.
2026-03-27

OpenClaw Engineering, Chapter 11: Continuous Learning with OpenClaw-RL

How OpenClaw-RL extracts training signals from conversations and uses them to improve agent behavior continuously. From binary feedback to token-level distillation, agents learn from every interaction without retraining the base model.
2026-03-26

OpenClaw Engineering, Chapter 8: Event-Driven Workflows

How OpenClaw agents spring into action automatically via hooks, webhooks, and TypeScript handlers—without waiting for human invocation. From internal events to CI/CD pipelines.
2026-03-23

Chapter 15: FAPI and High-Stakes Security — When the Defaults Aren't Enough

Chapter 15 of the OpenID: Modern Identity series — FAPI for high-stakes scenarios: what FAPI 1.0 Advanced and 2.0 require, Pushed Authorization Requests (PAR), JWT-Secured Authorization Requests (JAR), and migrating from FAPI 1.0 Advanced to FAPI 2.0.
2026-03-21

Chapter 13: Threat Modeling OpenID Systems — Thinking Like the Adversary

Chapter 13 of the OpenID: Modern Identity series — threat modeling for OIDC systems: token theft vectors and defenses, replay attacks and nonce validation, CSRF and state parameter mismanagement, redirect abuse and mix-up attacks.
2026-03-19

Chapter 12: User Lifecycle Management — Provisioning, SCIM, and the De-Provisioning Problem

Chapter 12 of the OpenID: Modern Identity series — user lifecycle management: JIT and bulk provisioning, SCIM for cross-system sync, de-provisioning done right, role mapping from IdP claims, and identity architecture for multi-tenant SaaS.
2026-03-18

Chapter 16 – Execution Risks and Isolation

Chapter 16 of Master Claude Chat, Cowork and Code confronts the real security risks of AI systems that execute commands and manipulate files — from command injection to data exposure — and explains the isolation models that keep things safe.
2026-03-17

Chapter 11: MFA and Conditional Access — Dispersing Authentication Risk

Chapter 11 of the OpenID: Modern Identity series — MFA fundamentals across the three factor categories, risk-based adaptive authentication, and step-up authentication using the OIDC acr and amr claims to match assurance to operation sensitivity.
2026-03-17

Chapter 7: Your First OpenID Application — The Handshake, End to End

Chapter 7 of the OpenID: Modern Identity series — building a real OIDC login end to end: the minimal flow, state and nonce, strict redirect URI matching, sessions from tokens, and the three flavors of logout.
2026-03-13

Chapter 5: Tokens in Depth — What's Actually in That JWT

Chapter 5 of the OpenID: Modern Identity series — what's really inside an ID Token, Access Token, and Refresh Token, how JWTs are structured, how to validate signatures correctly, and how DPoP and mTLS bind tokens to their legitimate holders.
2026-03-11

Chapter 6: What Is Claude Cowork? — The Desktop Agent That Touches Your Files

Chapter 6 of Master Claude Chat, Cowork and Code introduces Claude Cowork — a sandboxed desktop agent that automates file management, data extraction, and cross-application workflows on your local machine.
2026-03-07

Chapter 1: Why Identity Is Hard — The Trust Problem Behind Every Login

Chapter 1 of the OpenID: Modern Identity book series — why identity is a trust problem first and a technology problem second, and why authentication and authorization must never be conflated.
2026-03-07

OpenID: Modern Identity for Developers and Architects — A 22-Part Blog Series

Introduction and index for the 22-part blog series based on OpenID: Modern Identity for Developers and Architects by Sho Shimoda — with links to every chapter from Why Identity Is Hard through Identity in AI Systems.
2026-03-06

Master Claude Chat, Cowork and Code – The Complete Blog Series

The complete index for the Master Claude Chat, Cowork and Code blog series — 20 chapter teasers covering everything from prompting fundamentals to multi-agent architectures, security governance, and the future of AI-powered work.
2026-03-01

Monitoring, Logging, and Telemetry|Mastering Microsoft Teams Bots 5.3

Learn how to monitor and support your Microsoft Teams bot in production using logging, Azure Application Insights, and alerts. This section shows how to track user events, diagnose failures, and create telemetry that makes your bot reliable and supportable.
2025-04-17