The Agent Said It Was Fine | AI Security Engineer Toronto
This is the third in-person event from AI Security Engineers Toronto or AISecEngTo. Come for the talks, stay for the argument.
Co-host
Antler
AI agents now run commands, call tools and touch production. The guardrails around them are supposed to keep them in line, and the logs they write are supposed to tell us what they did. This edition looks at what happens when neither holds up.
Talks
Bypassing Agent-Framework Guardrails: How I Vibe Coded a Scanner to Find 7 Vulnerabilities
Ahmed Khan
Ahmed set out to hunt for bugs in MCP servers. He vibe coded a scanner, mcp-hunt, and ran it across 141 repos. It found no MCP bugs, but it did find one in an agent orchestration framework, which he disclosed and the maintainer patched (CVE pending). He then scanned the 1,000 most-used agent frameworks and MCP servers and came away with 7 vulnerabilities. This is the story behind them.
A Log Is a Story the Agent Told About Itself: Independently Verifying What AI Agents Did
Lei Zhou
When an agent runs commands on your machine, the agent writes the record of what it did. Signing a log proves nobody altered it, not that it’s true. An action the agent never wrote down leaves nothing to sign. Lei presents anchorstamp, an open-source Rust proof of concept that checks each agent claim against an observer the agent can’t reach: the Linux kernel’s audit subsystem. The live demo covers an honest agent, a forged claim, a hidden action, and an agent trying to tamper with the evidence. Lei will also be clear about what this approach cannot prove.
More on the speaker lineup soon.
Agenda
5:30 PM Doors, food and networking
6:00 PM Welcome
6:10 PM Talks + Q&A
7:30 PM Open discussion and networking
8:30 PM Close
Thanks to our co-hosts, Antler for making this possible.
Free to attend. Space is limited, so please register so we can plan for food. If you can’t make it, free up your spot.
AISecEngTO is a volunteer-run community for people working where AI and security meet: practitioners, researchers, builders and the curious.