https://curasec.metacog.co.kr/tags/identity-governance/Recent content in Identity-Governance on CuraSecHugoen-usMon, 31 Aug 2026 18:00:29 +0000https://curasec.metacog.co.kr/insights/2026-08-31-securing-claude-code-the-new-compliance-api-local-visibility/Mon, 31 Aug 2026 18:00:29 +0000https://curasec.metacog.co.kr/insights/2026-08-31-securing-claude-code-the-new-compliance-api-local-visibility/<ul> <li><strong>Engineer — Plan:</strong> If your team uses Claude Code, evaluate the new Compliance API endpoints to gain audit visibility into agent file access and shell execution; assess whether existing credential scoping adequately limits what the agent can reach on developer machines.</li> <li><strong>SOC/IR — Learn:</strong> Useful framing on the detection gap for AI coding agents: activity logs show what happened but not whether access was authorized — worth factoring into coverage planning for agentic tooling in your estate.</li> <li><strong>Leader — Plan:</strong> AI coding agents operating under developer credentials represent an emerging identity-governance gap; use this as a prompt to define a policy on agentic tool use before adoption outpaces oversight.</li> </ul>