Build a Platform and Watch It Burn — Michael Forrester, Accenture & Whitney Lee, Datadog
Source: YouTube · AI Engineer · published Oct 11, 2026 · 52:21
In a live workshop, the speakers unleash a guardrail-free agent ("BurritoBot") on a Kubernetes IDP, demonstrating real attacks and the layered defenses that stop them 0:12.
Key Takeaways:
• Unguarded agents cause reputational, financial, and data damage 0:36
• Naming matters: the model refused "Joker"/"Megatron" pods but deployed "promo-mascot" with a plausible story 6:12
• Defense-in-depth: network policies, Kyverno (trusted registries), and runtime tools (Falco, KubeArmor, Tetragon) block malicious deploys and snooping 15:16
• LLM Guard: input sanitization blocks bad prompts before the LLM call (saving cost); output guards scrub secrets, even mid-stream 31:39
• Malicious MCP servers exfiltrate data via tool descriptions—use registries/gateways, not public servers 41:00
• Never rely on model refusal—everything worked within ~20-30 prompts except a fork bomb; OpenTelemetry traces capture all tool calls 36:14
Before adding AI, ask: is it bounded, worth it, and verifiable 48:45? The full repo will be public as a reference implementation.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 1 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
So, hi. I'm Michael >> and I'm Whitney >> and we're here to take you on this grand adventure that we went through to basically launch an IDP platform and then we unleash an agent on it and you basically you're going to watch it burn. So, this is a workshop. So, we will get you participating with us at some point in time, but we'd like to frame some things out first. >> Well, first of all, we're going to share our inspiration, which was let's this meme. Does anyone remember this meme? So, this is a Yeah. a developer who wants to order a burrito bowl before they can eat at this burrito chain. But first, they need to have Python reverse a linked list before they can order. Can you help? and model being the the extremely helpful model that it is. It's like, "Yeah, sure. Let me how to tell you …