Build a Platform and Watch It Burn — Michael Forrester, Accenture & Whitney Lee, Datadog

This post contributes to the field of agentic system security by demonstrating a practical workshop that simulates attacks on an AI agent (burrito bot) across three configurations. It highlights the vulnerabilities of an exposed agent, the limitations of infrastructure controls (Kyverno, network policy) in preventing sensitive data access, and the effectiveness of AI guardrails (input/output filtering) in mitigating risks. The talk emphasizes that application boundaries cannot solely rely on model refusals and stresses the importance of inspecting agent behavior through traces (OpenTelemetry in Datadog) to understand prompts, tool calls, and results. It concludes by connecting agent security to established platform controls and the need for verifiable outputs.