PostHog's agent hit 8,000 weekly runs. Then came the audit

Source · We let an AI agent execute Bash and lived to talk about it — Sarah Sanders, PostHog
AI Engineer · Sarah Sanders · PostHog · 2026-09-14 uploaded · 21min

한국어·English

Test lead sentence one. Test lead sentence two.

Test — Test sentence with a number 8000.

In their words

So I was concerned there. Uh layer one uh it was an allow list and when I started digging into this allow list I started to feel a little bit better because it was pretty tightly bounded.5:31

Sarah Sanders slide · We let an AI agent execute Bash and lived to talk about it — 5:31 — Sarah Sanders slide · 5:31 · AI Engineer

we were dreaming of thousands of developers running this a week and yesterday we just hit 8,000 people running this a week.4:54

Sarah Sanders slide · We let an AI agent execute Bash and lived to talk about it — 4:54 — Sarah Sanders slide · 4:54 · AI Engineer

the interesting part wasn't the specific gaps or bugs they found themselves, but it was the shape of them. Because almost none of them were obviously evil. They were all two very innocent, well-intentioned things that were shaking hands and opening a hole.7:39

Sarah Sanders slide · We let an AI agent execute Bash and lived to talk about it — 7:39 — Sarah Sanders slide · 7:39 · AI Engineer

they were trying to invent secrets. They were trying to pull secrets from quite literally anywhere in the codebase and we shut it down. We said no more sub agents and because of the warlock we caught that.13:00

Sarah Sanders slide · We let an AI agent execute Bash and lived to talk about it — 13:00 — Sarah Sanders slide · 13:00 · AI Engineer

One thing to add — One thing to add — test note.

One thing to try tonight
Test action.