---
title: "Agentic Security: Permissions, Provenance, and the Agent Supply Chain"
category: "talks"
date: "2026-06-29"
time: "2:25pm-2:45pm"
track: "Security"
room: "Track 5"
speakers: ["Steve Yegge"]
sourceLabels: ["Official conference schedule", "Public YouTube metadata"]
scheduleTrack: "Security"
scheduleRoom: "Track 5"
scheduleLabels: ["Security", "Track 5", "sponsor", "confirmed"]
---
# Agentic Security: Permissions, Provenance, and the Agent Supply Chain

## Conference Context
- Date/time: 2026-06-29 · 2:25pm-2:45pm
- Track/room: Security · Track 5
- Speaker(s): Steve Yegge
- Session type/status: sponsor · confirmed

- Track: Security
- Room: Track 5
- Session type: sponsor
- Status: confirmed

## Session Description
As AI agents move from demos into production engineering workflows, the security boundary shifts from code alone to the permissions, tools, prompts, dependencies, credentials, and orchestration layers that agents can touch. This talk frames agentic security broadly: least-privilege agent permissions, sandboxing and capability design, provenance for agent-generated changes, risks in agent/tool/package supply chains, and practical patterns for keeping autonomous coding and operational agents auditable and containable.

## Media Evidence
[2026: The Year The IDE Died — Steve Yegge & Gene Kim, Authors, Vibe Coding](https://www.youtube.com/watch?v=7Dtu2bilcFs) (speaker-match related prior/adjacent AI Engineer video; captions: English auto-captions).

- Source video: `youtube-7Dtu2bilcFs`
- Slide deck: [[youtube-7Dtu2bilcFs-dense-slides|Dense Slides: 2026: The Year The IDE Died — Steve Yegge & Gene Kim, Authors, Vibe Coding]] — 13 visible slide image(s); 13 HTML recreation(s).
![[assets/dense-slides/7Dtu2bilcFs/slide-001.jpg]]
![[assets/dense-slides/7Dtu2bilcFs/slide-002.jpg]]
![[assets/dense-slides/7Dtu2bilcFs/slide-003.jpg]]
- Additional slide evidence: [[youtube-7Dtu2bilcFs-slides|Slides: 2026: The Year The IDE Died — Steve Yegge & Gene Kim, Authors, Vibe Coding]], [[youtube-7Dtu2bilcFs-reconstructed-slides|Reconstructed Slides: 2026: The Year The IDE Died — Steve Yegge & Gene Kim, Authors, Vibe Coding]]
- Slide-derived themes for `youtube-7Dtu2bilcFs`: coding, agentic, final, form, coming, next, stop, models.

## Evidence Graph
This evidence graph is generated from currently linked source material: official schedule text, related video pages, cached transcripts, visible slide text, dense/reconstructed slide pages, and AI slide-classification audits.

### Media Signals
- `youtube-7Dtu2bilcFs` — 9 slide-derived text signals
- Slide-derived themes for `youtube-7Dtu2bilcFs`: coding, agentic, final, form, coming, next, stop, models.
- Evidence links for `youtube-7Dtu2bilcFs`: [[youtube-7Dtu2bilcFs]], [[youtube-7Dtu2bilcFs-slides]], [[youtube-7Dtu2bilcFs-dense-slides]], [[youtube-7Dtu2bilcFs-reconstructed-slides]]

### Agent Reading Notes
Use these signals to refine the synopsis, topic links, people/company context, and method notes. If a source is a related external video rather than an exact official recording, keep it framed as supporting evidence.

## Transcript Status
Related video transcript availability: English auto-captions. Treat this as supporting context, not a recording of this exact scheduled session unless later confirmed. Not fetched yet.

## People
- [[steve-yegge]]

## Supporting Slides
- [[youtube-7Dtu2bilcFs-slides]] — extracted from the related public AI Engineer video.

## Slide Evidence
- Slide-only cropped deck: [[youtube-7Dtu2bilcFs-dense-slides]] (13 viable slide images).
- Related slide/OCR pages:
- [[youtube-7Dtu2bilcFs-dense-slides]]
- [[youtube-7Dtu2bilcFs-reconstructed-slides]]
- [[youtube-7Dtu2bilcFs-slides]]
- Slide-derived terms: `software`, `coding`, `google`, `deepmind`, `engineering`, `year`, `died`, `steve`, `yegge`, `gene`, `engineer`, `author`, `researcher`, `code`, `models`, `future`, `will`, `watch`

## Attendance Visibility
No high-confidence attendance icon signal is shown for this talk. The sampled video evidence was either low confidence, source-proxy-only, or did not expose a clear audience view.

## Synthesis
### Synthesized Breakdown
# Agentic Security: Permissions, Provenance, and the Agent Supply Chain ## Conference Context - Date/time: 2026-06-29 · 2:25pm-2:45pm - Track/room: Security · Track 5 - Speaker(s): Steve Yegge - Session type/status: sponsor · confirmed - Track: Security - Room: Track 5 - Session type: sponsor - Status: confirmed ## Session Description As AI agents move from demos into production engineering workflows, the security boundary shifts from code alone to the permissions, tools, prompts, dependencies, credentials, and orchestration layers that agents can touch. This talk frames agentic security broadly: least-privilege agent permissions, sandboxing and capability design, provenance for agent-generated changes, risks in agent/tool/package supply chains, and practical patterns for keeping autonomous coding and operational agents auditable and containable. ## Media Evidence [2026: The Year The IDE Died — Steve Yegge & Gene Kim, Authors, Vibe Coding](https://www.youtube.com/watch?v=7Dtu2bilcFs) (speaker-match related prior/adjacent AI Engineer video; captions: English auto-captions). - Source video: `youtube-7Dtu2bilcFs` - Slide deck: [[youtube-7Dtu2bilcFs-dense-slides|Dense Slides: 2026: The Year The IDE Died — Steve Yegge & Gene Kim, Authors, Vibe Coding]] — 13 visible slide image(s); 13 HTML recreation(s).

### Speaker And Company Context
- [[steve-yegge|Steve Yegge]] — Icon at [[gas-town|Gas Town]].

### Topics Covered
- [[agent-security]]
- [[agentic-search]]
- [[ai-sandboxes]]
- [[coding-agents]]

### Derived Links And Source Material
- [[youtube-7Dtu2bilcFs]] — related YouTube source page.
- [[youtube-7Dtu2bilcFs-slides]] — slide evidence.
- [[youtube-7Dtu2bilcFs-reconstructed-slides]] — slide evidence.
- [[youtube-7Dtu2bilcFs-dense-slides]] — slide evidence.

### Novel Concepts / Clever Methods
- No highlighted novel concept has been detected yet.

### Evidence Boundary
This synthesis is based on the official schedule and linked source pages. It should be revisited when exact session recordings or transcript-backed secondary sources are available.