diff --git a/documentation/blog/2026-01-05-agentic-guardrails-and-controls/agentic_guardrails_header.jpg b/documentation/blog/2026-01-05-agentic-guardrails-and-controls/agentic_guardrails_header.jpg new file mode 100644 index 00000000..a441a007 Binary files /dev/null and b/documentation/blog/2026-01-05-agentic-guardrails-and-controls/agentic_guardrails_header.jpg differ diff --git a/documentation/blog/2026-01-05-agentic-guardrails-and-controls/agentic_guardrails_header.png b/documentation/blog/2026-01-05-agentic-guardrails-and-controls/agentic_guardrails_header.png deleted file mode 100644 index 83c34901..00000000 Binary files a/documentation/blog/2026-01-05-agentic-guardrails-and-controls/agentic_guardrails_header.png and /dev/null differ diff --git a/documentation/blog/2026-01-05-agentic-guardrails-and-controls/image2.jpg b/documentation/blog/2026-01-05-agentic-guardrails-and-controls/image2.jpg new file mode 100644 index 00000000..457df91d Binary files /dev/null and b/documentation/blog/2026-01-05-agentic-guardrails-and-controls/image2.jpg differ diff --git a/documentation/blog/2026-01-05-agentic-guardrails-and-controls/image2.png b/documentation/blog/2026-01-05-agentic-guardrails-and-controls/image2.png deleted file mode 100644 index e1539483..00000000 Binary files a/documentation/blog/2026-01-05-agentic-guardrails-and-controls/image2.png and /dev/null differ diff --git a/documentation/blog/2026-01-05-agentic-guardrails-and-controls/image3.png b/documentation/blog/2026-01-05-agentic-guardrails-and-controls/image3.png index 9cb8482b..706a0543 100644 Binary files a/documentation/blog/2026-01-05-agentic-guardrails-and-controls/image3.png and b/documentation/blog/2026-01-05-agentic-guardrails-and-controls/image3.png differ diff --git a/documentation/blog/2026-01-05-agentic-guardrails-and-controls/image4.jpg b/documentation/blog/2026-01-05-agentic-guardrails-and-controls/image4.jpg new file mode 100644 index 00000000..22d73b50 Binary files /dev/null and b/documentation/blog/2026-01-05-agentic-guardrails-and-controls/image4.jpg differ diff --git a/documentation/blog/2026-01-05-agentic-guardrails-and-controls/image4.png b/documentation/blog/2026-01-05-agentic-guardrails-and-controls/image4.png deleted file mode 100644 index 9f2a0bf0..00000000 Binary files a/documentation/blog/2026-01-05-agentic-guardrails-and-controls/image4.png and /dev/null differ diff --git a/documentation/blog/2026-01-05-agentic-guardrails-and-controls/image5.jpg b/documentation/blog/2026-01-05-agentic-guardrails-and-controls/image5.jpg new file mode 100644 index 00000000..f73912f9 Binary files /dev/null and b/documentation/blog/2026-01-05-agentic-guardrails-and-controls/image5.jpg differ diff --git a/documentation/blog/2026-01-05-agentic-guardrails-and-controls/image5.png b/documentation/blog/2026-01-05-agentic-guardrails-and-controls/image5.png deleted file mode 100644 index b4e12dc6..00000000 Binary files a/documentation/blog/2026-01-05-agentic-guardrails-and-controls/image5.png and /dev/null differ diff --git a/documentation/blog/2026-01-05-agentic-guardrails-and-controls/index.md b/documentation/blog/2026-01-05-agentic-guardrails-and-controls/index.md index a790af57..79a3ee2a 100644 --- a/documentation/blog/2026-01-05-agentic-guardrails-and-controls/index.md +++ b/documentation/blog/2026-01-05-agentic-guardrails-and-controls/index.md @@ -6,7 +6,7 @@ authors: - alex --- -![blog cover](agentic_guardrails_header.png) +![blog cover](agentic_guardrails_header.jpg) In [our previous blog post](https://block.github.io/goose/blog/2025/03/31/securing-mcp/) we detailed the Model Context Protocol (MCP) system and discussed some security concerns and mitigations. As a brief recap, MCP provides agents with a means to accomplish tasks using defined tools; reducing the burden of using complex and varied APIs and integrations on the agent. @@ -32,7 +32,7 @@ That’s a lot of words, here’s a picture instead, *(Typos Provided for free\*
-![CSRF Example - Attack Works](image2.png) +![CSRF Example - Attack Works](image2.jpg) Example of a successful CSRF attack chain with by a very devious hacker @@ -43,7 +43,7 @@ Today, CSRF is largely mitigated by **browser-enforced CORS (Cross-Origin Resour
-![CSRF Example - Attack Fails](image5.png) +![CSRF Example - Attack Fails](image5.jpg) CORS mitigated the CSRF attack leaving a very sad (but still devious) hacker. Note: in practice the CORS check would likely happen during preflight. @@ -212,7 +212,7 @@ To handle these threats we propose **removing** **all tool-call responses from t
-![Tool Response Flush Process](image4.png) +![Tool Response Flush Process](image4.jpg) Our workflow imagined (mostly) correctly with ♥️ by ChatGPT