AI Red Team Engineering notes, research references, and field notes on AI systems, responsible AI, governance, and compliance.
Global search

Search AI Red Team

Search across the complete knowledge base.

Enter at least two characters to begin.
↑↓ select Enter open Browse the full research archive
Google Cloud Security Blog · September 21, 2026

Strengthen your CI/CD pipeline with new Secure Source Manager capabilities

news AI Engineering
Why it matters

Google Cloud adds granular CODEOWNERS approval rules and Developer Connect integration to Secure Source Manager. The implementation supports per-path and per-branch approvers, independent review sections and private CI/CD connectivity.

My takeaway: Require separate reviews for sensitive files and deployment branches, then verify that private build integrations preserve repository and network access boundaries. Test nested ownership rules against representative pull requests.
Keep exploring

More curated notes connected through AI Engineering.

Google Cloud Security Blog · tool

Now in preview: Find and fix software vulnerabilities with CodeMender

Google opened a preview of CodeMender, an AI code-security agent delivered through Gemini Enterprise Agent Platform and AI Threat Defense. It is designed to inspect code, identify and validate potentially exploitable defects, and produce targeted fixes, with Google’s specialized Gemini 3.5 Flash Cyber model initially restricted to governments and trusted partners.

AWS Security Blog · guide

Transforming Bedrock Guardrails events into OCSF with CloudWatch

AWS provides an implementation guide for a Lambda pipeline that converts Bedrock Guardrails intervention logs into OCSF Detection Findings in the CloudWatch unified data store. It includes field mapping and queries that correlate guardrail events with identity and network activity.

Google DeepMind Blog · framework

Piloting the world's first double-blind AI evaluations

Google DeepMind, Singapore's AI Safety Institute, OpenMined, AVERI, and MLCommons are piloting an external evaluation in a confidential-computing environment. The evaluator's hidden tests and Google's Gemini Flash Lite weights remain private from one another, reducing benchmark contamination without transferring either sensitive asset.