Enterprise Security by Design
EDDI eliminates entire classes of security vulnerabilities by design. There is no eval(), no code execution blocks, and no dynamic code injection, agent behavior is defined through declarative JSON configuration only.
Why This Matters Now
The AI agent ecosystem is under unprecedented security pressure. In early 2026, hundreds of critical vulnerabilities were publicly documented across major open-source agent frameworks, including CVSS 10.0 remote code execution flaws, sandbox escapes, and authorization bypasses. The root cause in most cases: platforms that execute user-supplied or dynamically generated code at runtime.
The Cloud Security Alliance identified a systemic "AI Agent Disclosure Vacuum": traditional vulnerability reporting processes cannot keep pace with the non-deterministic nature of AI systems. For enterprises deploying agents in regulated environments, the security posture of the underlying platform is no longer a nice-to-have. It is a board-level risk decision.
EDDI's Architectural Defense
Rather than attempting to sandbox code execution after the fact, EDDI eliminates the attack surface entirely. Agent behavior is defined through declarative JSON configuration, never through executable code blocks, eval() statements, or dynamic script injection. This architectural decision structurally prevents the vulnerability classes that have affected competing platforms.
Security Capabilities
- Zero eval(): No dynamic code execution of any kind. Agent logic is declarative JSON only
- OIDC/Keycloak: Enterprise authentication and authorization with RBAC roles (admin, editor, viewer)
- Secrets Vault: AES-256-GCM envelope encryption for API keys with automatic secret scrubbing on export
- Path Traversal Protection: Input validation at every boundary prevents directory escape attacks
- SSRF Protection: URL validation and domain allowlisting prevent server-side request forgery
- Cryptographic Audit Trails: HMAC-SHA256 signed, tamper-evident operation logs with per-agent cryptographic signing
- EU AI Act Ready: Built-in governance capabilities for regulatory compliance
- Secret Redaction: Automated filter scrubs API keys, vault references, and sensitive data from all audit entries
- PII-Safe Logging: GDPR operations log SHA-256 pseudonyms, never raw user identifiers
- Sigstore Cosign: Keyless OIDC container image signing, cryptographically verify any Docker image was built by official CI
Automated Security Pipeline
Every push and pull request is scanned by 6 automated security tools, all GitHub Actions SHA-pinned to prevent supply-chain attacks:
- CodeQL: Semantic SAST analysis with
security-extendedqueries - Trivy: CVE scanning for filesystem dependencies and Docker images (blocking on CRITICAL/HIGH)
- Gitleaks: Git history scanning to prevent secret and credential leakage
- ZAP: DAST API scanning against the live Docker image
- CycloneDX: SBOM generation for supply chain transparency
- Jazzer: Coverage-guided fuzz testing for security-critical parsers
Governance & Compliance Integration
Security capabilities feed directly into EDDI's compliance framework. The immutable audit trail satisfies EU AI Act record-keeping requirements (Art. 12), pipeline tracing provides AI decision transparency (Art. 13), and the Management UI enables human oversight with emergency stop capabilities (Art. 14). The same infrastructure supports GDPR, HIPAA, SOC 2, and 15+ additional regulatory frameworks, all through one unified API.