AEGIS: A Zero-Trust SRE Agent
schwentker · x · 2026-07-19
AEGIS is an on-call SRE agent whose core feature isn't just automation, but the absolute requirement to pass real zero-trust policy gates. The post demonstrates a real failure-recovery flow: the agent first attempts `restart_service` following a standard playbook, but gets blocked by an **HTTP 403** from Pomerium. The system then feeds the rejection reason back to the agent for a new proposal, ultimately triggering a rollback and recovering in **24 seconds** with **0 human intervention**. The included diagram shows the complete architecture: `observe → diagnose → propose → authorize → execute → verify`, with every step logged in the event log and live console. The author emphasizes that this involves "real agents, real policies, real recovery," rather than a simulated demo.
Related event: Real-World Demos Show a New Agent Pattern(3 posts)→
More from coding & agent
- Developer says an agent feels freer after removing linting and type checks — hichaelmart · 2026-07-21
- Freerange adds static numeric-range proofs for UI code without running the app — cnakazawa · 2026-07-21
- pen.dev lets developers compare frontier models in parallel on frontend design tasks — yakuzeg · 2026-07-21
- ComfyUI slowdown may come from models reloading from disk instead of RAM — J6j6 · 2026-07-21
- ZooData turns any web page into structured JSON for agents with one API call — dr_cintas · 2026-07-21
- Side-by-side model test lands both answers on the first try, then shifts to loop engineering — glenbeer · 2026-07-21