Knowledge Base Regulation Tracker Standards & Frameworks OSS Directory AI Incident Database Research Paper Library Case Studies Society Articles News Jobs About Charter Sign inBecome a Member
Home/Case Studies/Northern European government agency puts coding agents behind sandboxes, signed configuration and human approval

Northern European government agency puts coding agents behind sandboxes, signed configuration and human approval

Following the coding-tool CVEs of 2025 and 2026, the agency standardised how its developers use AI coding agents: ephemeral sandboxes, blocked auto-execution of project configuration, signed prompts and mandatory security review of AI-authored changes.

Coding agentsSupply chainSigned configurationTrusted publishingCode review

Contribute

Spot an error, or know a record we should add? Members can propose additions and submit corrections.

Submit case studyReport a correction or request removal

Related in Case Studies

Bypassing ID.me Identity Verification

An individual filed at least 180 false unemployment claims in the state of California from October 2020 to December 2021 by bypassing ID.me's automated identity verification system. Dozens of fraudulent claims were…

Public sectorIncident response and recovery

Camera Hijack Attack on Facial Recognition System

This type of camera hijack attack can evade the traditional live facial recognition authentication model and enable access to privileged systems and victim impersonation. Two individuals in China used this attack to…

Public sectorIncident response and recovery

GAO audits DHS's use of AI for cybersecurity against 11 accountability practices

GAO examined the two AI cybersecurity use cases in DHS's inventory and found one was not actually AI, then measured DHS against its AI accountability framework and issued eight recommendations on responsible use.

Public sectorAudit and certification