cyber-agent-engine

Off-box: why the LLM must not live inside the firewall

🇫🇷 Version française 💻 Source code (AGPL): github.com/patlegu/cyber-agent-engine A question of topology, not just security The first three articles in this series detailed how cyber-agent-engine constrains an LLM that drives a production firewall: tokens rather than real values (article 2), a fail-closed policy and human approval (article 3). This one tackles a prior question, almost architectural before it is a security matter: where must this LLM physically run? On the equipment it drives, or remotely, on the other side of a network call?