Two Walls Around an AI Agent

Everyone in Oslo arguing about AI sovereignty is arguing about where the servers are. That is the outer wall. It is the half of the question that gets asked.

The other half is what your agent is carrying. Secrets leak into context, into prompts, into logs, into a transcript that goes somewhere you did not choose — and they do it long before anyone gets near the machines those secrets are stored on. That is the inner wall, and it fails quietly.

On 22 September we put both walls in one room. One speaker built the outer one. The other spends his time on the inner one. Neither thinks you get to pick just one.

Speakers
André J — Head of Product at OpenGeni, an open-source agent harness for running autonomous agents on infrastructure you own. He takes the outer wall.
Nikolai Norman Andersen — CTO at Variant Oslo. He brings a revised version of "How to Keep Secrets from your Agent" from JavaZone earlier this month: how to store secrets encrypted in git, and how to let an agent use a secret without ever seeing it. He takes the inner wall.

Full talk details go up on Friday.

Who should come
Builders running agents against real systems, architects deciding what an agent gets to touch, security people who have been asked "is this safe yet", and anyone who has been handed the sovereignty question without a way to answer it. Both talks are practical. Neither is a lecture about risk.

You do not need to have picked a side on where your models run. That is roughly the argument.

Bring your curiosity and your beverage of choice.