<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>AskDoozy blog</title>
    <link>https://askdoozy.com/blog</link>
    <atom:link href="https://askdoozy.com/blog/rss.xml" rel="self" type="application/rss+xml" />
    <description>Notes from building Doozy, the AI coworker in Slack: how teams hand work to AI, what customers teach us, and how it works.</description>
    <language>en</language>
    <lastBuildDate>Tue, 27 Oct 2026 00:00:00 GMT</lastBuildDate>
    <item>
      <title>Keeping API keys out of our AI agent's sandbox, and what that doesn't solve</title>
      <link>https://askdoozy.com/blog/ai-agent-api-keys-sandbox</link>
      <guid isPermaLink="true">https://askdoozy.com/blog/ai-agent-api-keys-sandbox</guid>
      <description>AI agent security in practice: how our agent works in production systems without holding API keys, with job tokens, a credential proxy and read-only SQL.</description>
      <pubDate>Tue, 27 Oct 2026 00:00:00 GMT</pubDate>
      <dc:creator>Shiv Sarthak Sabhlok</dc:creator>
      <category>AI agent security</category>
      <category>Prompt injection</category>
      <category>Credentials</category>
      <category>Postgres</category>
      <category>Slack</category>
    </item>
  </channel>
</rss>
