AI Agent Security for Small Teams: What Enterprise Frameworks Miss¶

41% of MCP servers in the wild lack authentication. Enterprise security frameworks assume you have a SOC team and a seven-figure budget.

The Threat Model for Agent Ecosystems¶

• Prompt injection — malicious content in tool outputs that hijacks agent behaviour
• Credential leakage — API keys exposed through agent logs or LLM context
• Lateral movement — a compromised agent pivoting via the message broker
• Supply chain — malicious third-party tools that exfiltrate data

F3L1X Security Architecture¶

key-master: Encrypted Secrets Vault¶

Fernet (AES-256-CBC) encryption, BIP39 mnemonic recovery, per-realm key isolation, zero cloud dependency.

Ed25519 License Certificates¶

Asymmetric cryptography for offline license validation. No phone-home required. License enforcement works airgapped.

Herald Three-Zone Trust Model¶

Zone 1: User Agents      — Full trust
Zone 2: Internal Agents  — Elevated trust
Zone 3: External Agents  — Restricted, sandboxed

Trust boundaries enforced at Herald. An external tool cannot escalate its trust level regardless of what it claims.

The BYOK Advantage¶

Bring Your Own Keys means F3L1X never stores your API keys. They live in your .env file, encrypted by key-master. This is a structural security property — not a policy promise.

FAQ¶

What is BYOK in AI agent security?¶

BYOK (Bring Your Own Keys) means you connect your own API accounts (Claude, OpenAI, etc.) directly. The platform never stores, transmits, or has access to your API keys. They remain encrypted on your local machine, managed by the key-master vault. This eliminates an entire class of credential theft vulnerabilities.

How does the three-zone trust model work?¶

Herald assigns every agent to one of three trust zones based on its origin. User-created agents get full trust. Internal ecosystem agents get elevated trust. External marketplace agents are sandboxed with restricted permissions. An agent cannot escalate its zone — trust boundaries are enforced at the broker level, not by the agents themselves.

F3L1X — First in Agentic Technology