@LorasisSec

Security Immune System™. Silicon-to-kernel security for critical infrastructure. Built by @japelbaum.

lorasis.io
Joined July 2026
  • Tweets8
  • Following1
  • Followers2
Hugging Face was just breached by an autonomous AI agent: credential harvesting, lateral movement, self-migrating C2, over a weekend. Lorasis enforces from inside the kernel, below the layer that agent owned. huggingface.co/blog/security…

Security incident disclosure — July 2026

We’re on a journey to advance and democratize artificial intelligence through open source and open science.

huggingface.co
1
77
Hugging Face used 17,000+ recorded events to reconstruct its July incident. Volume helped. Volume alone is not assurance. Can responders prove each event’s workload, timing and scope, and identify missing evidence? lorasis.io huggingface.co/blog/security…
6
1/3 The July Hugging Face incident moved across datasets, workers, credentials and cluster infrastructure. It shows why “attested” is incomplete without a precise object and boundary. Source: huggingface.co/blog/security… lorasis.io

Security incident disclosure — July 2026

We’re on a journey to advance and democratize artificial intelligence through open source and open science.

huggingface.co
7
July’s Hugging Face incident crossed datasets, a worker, service credentials and wider infrastructure. “Was it sandboxed?” is too small a question. Which boundary failed, when, and what evidence proves the sequence? lorasis.io openai.com/index/hugging-fac…

Lorasis is building the cybersecurity Trust Operating System for consequential machine action.

Lorasis — operational evidence for AI and automated systems. REAP, the Runtime Enforcement and Attestation Platform, connects bounded runtime evidence, explicit authority, governed action, independ...

lorasis.io
1
29
It's time we stop using the word leadership. It reminds me of one person giving orders while everyone follows. We don't need to lead people, we need to walk beside them and build with co creators, not followers. What do you call that person?
1
1
44
"Trust me," all the way down. That's the audit chain most infrastructure runs on. A hash-chained log proves nobody edited it, not that it's true. Our founder @japelbaum is writing the series on replacing trust with proof. Part 2 just went live on his feed. Follow along.
42
How are you proving your AI agent’s decisions haven’t been altered after the fact? Some regulators are already asking.
3
1
22
106,935
How are you proving your AI agent's decisions haven't been altered after the fact? Some regulators are already asking. Here's how Lorasis makes it work: Every decision gets a cryptographic signature the moment it's written. That signature links to the one before it, so the whole record forms a single verifiable sequence. Edit or reorder any entry, and everything after it stops verifying. Not because a rule caught it. Because the math no longer adds up. You're not trusting a log. You're checking math. Learn more by clicking the link below! lorasis.io #AISecurity #AIRegulation
1
1
414
Load more