Secure Software Factory Show and Tell: NYC agent security. Keycard, Braintrust, Socket and Docker DevRel will host Secure Software Factory Show and Tell on October 13, 2026, from 5:30-8:30 PM EDT at Elsie Rooftop in New York. The panel and planned live demonstrations focus on securing software workflows operated by AI agents. Registration is free and requires host approval, with doors opening at 5:30 PM at 1412 Broadway, New York, NY 10018. The gathering puts an operational question in front of the people building those workflows: how does responsibility travel with an agent as it moves between tools? Runtime authorization, isolated execution, behavioral evidence and component checks each carry part of the answer. For engineering and security owners, the interesting territory is where one control hands the job to another, especially when a system needs to be stopped. What the software factory program puts on display. The advertised demonstrations divide the work into recognizable responsibilities. Keycard plans to cover discovery, runtime authorization scoped to a task, and response to a rogue agent; Docker will address execution constraints, Braintrust will examine behavior and drift, and Socket will address component validation. The program gives attendees a way to inspect how those responsibilities fit around an agent that produces software. Consider an engineering team deciding which tools a coding agent may use. Someone has to define the task, someone has to grant access, and someone has to explain the resulting activity. An environment boundary and an authorization decision serve different purposes. A trace adds another perspective, but the team still needs to understand which action the evidence describes and who was allowed to initiate it. That is the conversation to take into a demonstration. Ask where the boundary is enforced, what information travels through it, and what remains visible after the agent finishes. A convincing answer should make the ownership of the next step easier to understand. These are editorial questions for attendees, rather than promises that every demonstration will resolve them. The panel-to-demo format is useful because an implementation can expose assumptions that a broad discussion leaves floating. A security owner and a platform engineer may agree on the word "authorized" while expecting different evidence behind it. Watching the same operation gives them something concrete to discuss, including the parts of a workflow that their respective teams need to review together. Agent Baseline gives the room a shared starting point. The event draws on Agent Baseline, an open-source reference framework currently labeled v1.0-draft. Its six outcomes cover discovering agents, constraining their reach, authorizing actions, observing activity, validating systems and responding to incidents. Published July 30, 2026, the framework remains a working draft; its presence in the program should be understood as an organizing approach rather than a certification. The framework's value for this discussion is the breadth of the responsibility it names. An agent inventory helps an organization understand what is operating, while limits and authorization define what an agent can do. Observation, validation and response ask how teams will evaluate behavior and act when it crosses a boundary. Those responsibilities can sit with different owners even inside the same company. For an operator, the practical exercise is to follow a task through those owners. Which team can explain the permitted access? Which team can connect an action to its result? Which team can remove authority and preserve the evidence? A draft framework provides a common set of questions, while each organization still has to establish the answers in its own environment. The demonstrations also sit beside the vendors' stated product areas. Docker offers secure agent sandboxes, Braintrust focuses on agent observability and evaluations, and Socket addresses malicious software dependencies. Keycard describes runtime authorization for agents. Taken together, those perspectives make the boundaries between product responsibilities worth examining; the event has yet to demonstrate how any particular deployment will perform. The listed panel spans identity and operational controls. The current organizer program lists Dick Hardt, founder of AAuth; Ian Livingstone, Keycard co-founder and CEO; Ahmad Nassri, Socket CTO; Zachary Hamilton, Braintrust solutions engineer; and Eli Aleyner, Docker VP Product Strategy. Allie Howe, host of the Insecure Agents podcast, is scheduled to moderate. These are forthcoming program participants, with the organizer's listing controlling any subsequent changes. Dick Hardt's standards background gives the identity discussion a useful anchor: RFC 6749 identifies Dick Hardt as editor of the OAuth 2.0 authorization framework. The connection matters because delegated access has a long technical history. An agent-operated workflow gives the audience a concrete setting in which to ask how identity and permitted action relate across a sequence of tools. The other listed roles bring the product and implementation responsibilities into the same conversation. Executives can explain intended boundaries and product choices; an implementation practitioner can help surface the questions a team encounters while trying to make behavior visible. The role descriptions support that range of perspectives without establishing what any individual will say on the night. Attendees can make the exchange more useful by bringing a specific operating question. A platform owner might ask about runtime isolation, while a security lead might ask about access revocation or an investigation record. A technical founder might ask which responsibility stays with the buyer. Those are different entry points into the same workflow, and the panel gives them a place to meet before the demos begin. Why the New York timing sharpens the discussion. The gathering appears on the official side-event schedule for AI Engineer New York 2026, which runs October 12-14 and focuses on production AI across financial services. Readers following DevCuration's Events coverage can place this gathering beside the wider conference program. It brings the discussion of agent-operated development close to an audience already considering how AI systems behave inside working institutions. For that audience, an agent's useful output is one piece of the operating decision. A team also needs a clear account of the access involved, the actions taken and the recovery path available. The show-and-tell format invites a more tangible conversation about those responsibilities than an abstract promise of autonomy. Its usefulness will depend on the questions participants can connect to their own systems. Elsie Rooftop offers a setting for continuing those questions after the formal program. The approval-required registration gives organizers control over admission, but the public listing establishes no guaranteed introductions, investor access or business return. Engineers, security leaders and technical operators can evaluate the program on its verified subject matter and follow the organizer's registration instructions for attendance. The work waiting back at the office will still involve several people: the owner of the runtime, the person granting credentials, and the colleague who needs an intelligible record when something goes wrong. October 13 gives those responsibilities a shared demonstration to examine. The useful conversation can continue around the exact point where an agent's authority ends and a human team has to decide what evidence is enough for the next task.

AI security startup Socket hits $1B valuation after $60M raise to stop software supply chain attacks. AI-generated code is flooding into enterprise software faster than security teams can review it, and investors are betting that startups capable of spotting threats before they reach production could become one of the hottest categories in cybersecurity. That bet is helping Socket join the unicorn club. The developer security startup announced Thursday it has raised $60 million in Series C funding at a $1 billion valuation. The round was led by Thrive Capital, with participation from Andreessen Horowitz (a16z), Abstract Ventures, and Capital One Ventures. Founded in 2020, Socket is trying to solve a growing problem inside modern software development. AI coding tools are helping engineers ship code faster than ever, though much of that code relies heavily on open-source packages pulled from outside repositories. That has created new openings for attackers targeting software supply chains. The company counts Anthropic, xAI, Replit, Cursor, Figma, Vercel, Gusto, Mercado Libre, and Cribl among its customers, as well as Fortune 100 companies in financial services and media. As AI speeds up coding, Socket raises $60M to stop malicious open-source threats. The timing of the raise reflects a broader shift happening across enterprise security. Software supply chain attacks have moved from a niche developer concern to a boardroom issue as organizations increasingly rely on open-source dependencies and AI-generated code. A recent OWASP Top 10:2025 community survey ranked software supply chain failures as the top concern among respondents. A separate 2025 Linux Foundation report found that only 36% of organizations evaluate the direct dependencies of open source software before introducing new components into production environments. Recent attacks have exposed how vulnerable the ecosystem has become. The compromise of Axios, one of the most widely used JavaScript packages, showed how quickly malicious code can spread once a dependency is poisoned. Socket said it identified the malicious dependency within six minutes and helped organizations block it before it entered production systems. The company added that more than 2,000 organizations onboarded to its platform within 24 hours of the incident. Socket's platform focuses on analyzing the behavior of open-source dependencies before they enter a company's codebase. Instead of relying entirely on public vulnerability databases that often surface threats only after disclosure, the company says its system detects suspicious behavior patterns in real time, including previously unseen attack techniques. The platform combines AI-assisted analysis with human review to flag malicious packages, prioritize exploitable vulnerabilities, and reduce dependency risk. "AI is changing how software gets built at every level," said Feross Aboukhadijeh, founder and CEO of Socket. "Teams are moving faster, more code is being generated, and more of what ends up in production now comes from outside the company. The hard part is keeping that speed without losing visibility into what's actually getting shipped, and that's where Socket comes in." Investors see the shift as part of a larger change in cybersecurity. Traditional vulnerability scanners were built for an era when threats moved slower, and security teams had more time to react after weaknesses became public. "Security is changing radically and rapidly," said Philip Clark, Partner at Thrive Capital. "Legacy tools were designed to react to known vulnerabilities and assumed there was sufficient time to prevent a breach. Today, AI models can identify vulnerabilities so well and so quickly that this is no longer an option. We need tools like Socket that can identify threats in third-party code before they enter production, and we believe there is no team better positioned to meet that demand." The funding comes as enterprises race to secure software pipelines increasingly shaped by AI-generated code, autonomous coding agents, and open-source libraries maintained outside corporate walls. Investors appear convinced that securing the software supply chain may become one of the defining cybersecurity battles of the AI era.