AI Red Team Engineering notes, research references, and field notes on AI systems, responsible AI, governance, and compliance.
Global search

Search AI Red Team

Search across the complete knowledge base.

Enter at least two characters to begin.
↑↓ select Enter open Browse the full research archive
Google Cloud Security Blog · September 21, 2026

Strengthen your CI/CD pipeline with new Secure Source Manager capabilities

news AI Engineering
Why it matters

Google Cloud adds granular CODEOWNERS approval rules and Developer Connect integration to Secure Source Manager. The implementation supports per-path and per-branch approvers, independent review sections and private CI/CD connectivity.

My takeaway: Require separate reviews for sensitive files and deployment branches, then verify that private build integrations preserve repository and network access boundaries. Test nested ownership rules against representative pull requests.
Keep exploring

More curated notes connected through AI Engineering.

OpenAI News · guide

The Defender’s Window

OpenAI describes a staged program for AI-assisted defense: use agents to review code and infrastructure, triage alerts, enumerate attack paths, and validate security invariants while retaining strong isolation and least privilege. Its recommended rollout starts with internet-facing services and vulnerability backlogs, moves security review into CI, requires focused fixes and regression tests, and expands from read-only triage to narrowly bounded automation only after teams build evidence and confidence.

Google Cloud Security Blog · tool

Now in preview: Find and fix software vulnerabilities with CodeMender

Google opened a preview of CodeMender, an AI code-security agent delivered through Gemini Enterprise Agent Platform and AI Threat Defense. It is designed to inspect code, identify and validate potentially exploitable defects, and produce targeted fixes, with Google’s specialized Gemini 3.5 Flash Cyber model initially restricted to governments and trusted partners.

AWS Security Blog · guide

Transforming Bedrock Guardrails events into OCSF with CloudWatch

AWS provides an implementation guide for a Lambda pipeline that converts Bedrock Guardrails intervention logs into OCSF Detection Findings in the CloudWatch unified data store. It includes field mapping and queries that correlate guardrail events with identity and network activity.