A prompt-injected model cannot skip your approval step
How 10xGraph keeps handoffs, tool visibility, tool results and interrupt resumes under the graph's control, so a steered model cannot walk around a human approval.
Logs that are safe to ship
What 10xGraph keeps out of logs, traces and Sentry: hashed user ids, redacted Redis URLs, tool error references, escaped client values and generic errors in production.
SOC 2 and ISO 27001 for AI apps: what an auditor asks and what 10xGraph covers
What auditors ask of an AI backend, which controls 10xGraph supports in software, and which stay with your organization. Includes a short team checklist.
Agents that fetch URLs: SSRF-safe tools and media by default
How fetch_url and client-supplied media links are limited to public addresses in 10xGraph: pinned connections, checked redirects, MediaFetchPolicy and a pre-run 400.
What runs around your AI code: the infrastructure 10xGraph ships
Follow one request through 10xGraph: API server, access control, data and state, background jobs, observability and deploy. What you write and what runs for you.
What production-ready means in 10xGraph, and what you still have to do
What 10xGraph runs around your agent by default, the config that turns each protection on, what 1.0 adds, and the honest list of what stays your job.
How 10xGraph keeps your customers' data apart
How 10xGraph keeps users and tenants apart for teams shipping AI to their customers: verified identity, roles with reach, 404 outside reach and tenant columns.
AI agents in fall 2026: what changed, and how to build for it with 10xGraph
Cheaper models, a stateless MCP spec, MCP CVEs, approvals everywhere and EU transparency rules: what changed in AI in 2026 and the 10xGraph code to handle each one.