Skip to content
SecureSpace

Preparing the security surface.

SecureSpace Research

Research the security questions AI creates.

SecureSpace studies agents, tools, retrieval, permissions, evidence, and the systems around them.

The goal is simple: turn hard questions into security practice and future Mintos AI infrastructure.

The public research layer is opening gradually. Materials will be released selectively after appropriate review.

Why now

The system changes faster than the established security model.

Many security practices were created for software in which users issued requests, applications executed defined logic, and infrastructure followed reasonably predictable operational boundaries.

Intelligent systems complicate that model. A model may receive instructions from several sources. Retrieved content may influence its behaviour. An agent may use tools created by another team. A workflow may combine several individually acceptable actions into a high-impact outcome.

Human approval may exist, but the reviewer may not receive enough context to make a meaningful decision. These are problems of identity, authority, context, trust, architecture, evidence, and operational responsibility.

SecureSpace studies these questions as connected system problems rather than isolated model defects.

Areas of inquiry

The research surface spans agents, applications, infrastructure, and evidence.

Active inquiry

Agent security

How agents receive objectives, create plans, use tools, retain memory, delegate actions, cross system boundaries, and remain accountable to human operators.

  • Agent identity
  • Authority delegation
  • Approval thresholds
  • Autonomy constraints
  • Failure containment
  • Evidence trails
Open collaboration

Instruction and context integrity

How system prompts, user instructions, retrieved content, tool descriptions, memory, and external data influence model and agent behaviour.

  • Instruction precedence
  • Untrusted content
  • Context labelling
  • Hidden instructions
  • Conflict resolution
Publication prep

Retrieval and provenance

How intelligent systems determine where information came from, why it was selected, whether it is trustworthy, and how it influenced a result.

  • Evidence attribution
  • Source manipulation
  • Sensitive-source separation
  • Uncertain provenance
  • Review records
Active inquiry

Identity, permissions, and authority

How human identities, service identities, agents, tools, applications, and cloud resources should receive and exercise authority.

  • Human vs agent action
  • Temporary authority
  • Delegated access review
  • Read and execute separation
  • Cross-tool authority
Open collaboration

Tool-use security

How models and agents interact with APIs, terminals, cloud systems, databases, files, communication tools, and business workflows.

  • Tool descriptions
  • Input validation
  • Reversible actions
  • Destructive controls
  • Output handling
  • Reconstruction
Active inquiry

AI application security

How conventional product risks interact with prompts, retrieval, generated content, agentic features, model providers, and user-controlled context.

  • Authentication risk
  • Model output handling
  • Tenant context influence
  • Deterministic validation
  • Business logic
Planned

Runtime behaviour and observability

How teams can understand what intelligent systems actually did, not only what the implementation intended them to do.

  • Event capture
  • Model and tool activity
  • Investigation context
  • Anomaly review
  • Alert overload
Active inquiry

Human oversight

How human decisions should remain meaningful when systems operate faster and with more context than reviewers can easily inspect.

  • Approval design
  • Reviewer context
  • Approval fatigue
  • Prohibited actions
  • Responsibility records
Publication prep

Governance and evidence

How security activity can become reliable evidence for engineering teams, leadership, buyers, regulators, researchers, and incident responders.

  • Meaningful records
  • Decision explanation
  • Control ownership
  • Reusable evidence
  • Honest limitation language
Open collaboration

Secure AI development

How AI-assisted development, coding agents, model-generated code, repositories, CI/CD, cloud systems, and production access should be governed.

  • Coding-agent authority
  • Repository instructions
  • Generated-change review
  • Command approval
  • Production boundaries
Principles

How SecureSpace approaches research.

Evidence before claims

SecureSpace should not publish a conclusion because it is interesting or commercially useful. Claims should follow evidence, review, and clearly stated limitations.

Systems before isolated features

Research should examine how models, tools, people, data, applications, APIs, and infrastructure interact.

Practical relevance

Research should be able to inform architecture, engineering, security operations, policy, product design, or future infrastructure.

Responsible disclosure

Findings that could create risk must be handled carefully. Publication should not take priority over affected systems or users.

Clear uncertainty

Research should state what is known, what remains uncertain, what was not tested, and where conclusions may not generalise.

Data restraint

Research should collect and retain only what is necessary for the question being studied.

Mintos AI

Research informs the product. Product reality sharpens the research.

Mintos AI is being developed inside SecureSpace as a security infrastructure layer for intelligent systems.

Research may inform areas such as agent context, permissions, connected surface mapping, policy, approval, evidence, system relationships, and security workflows.

This does not mean every research question becomes a product feature. Product design must also account for operational reliability, usability, privacy, performance, customer boundaries, and the realities of engineering teams.

SecureSpace intends to maintain a continuous relationship between research and product without confusing a research direction with a shipping capability.

Who can collaborate

Research proposals may come from many kinds of serious teams.

Submitting a proposal does not imply that a collaboration will be accepted or funded.

Universities
Academic laboratories
Doctoral and postgraduate researchers
Independent researchers
Cybersecurity practitioners
AI and machine-learning researchers
Enterprise security organisations
Product and infrastructure teams
Technology companies
Public-interest organisations
Student research groups
Government and policy researchers where appropriate
Publication approach

Publish carefully, not continuously.

SecureSpace does not intend to publish material merely to maintain a content schedule.

Public material may include research notes, technical observations, frameworks, evaluation methods, threat models, security design principles, research briefs, public findings, responsible-disclosure summaries, and research questions.

Some work may remain private because of confidentiality, safety, customer obligations, incomplete evidence, or responsible-disclosure requirements.

FAQ

Questions teams usually ask

Does SecureSpace currently operate a public research library?

The public library is being prepared and will open gradually. SecureSpace will publish selectively rather than populate it with placeholder material.

Is SecureSpace accepting research proposals?

Yes. Universities, companies, researchers, students, and other relevant organisations may submit serious proposals through the research-collaboration process.

Does every proposal receive funding?

No. Submission does not guarantee funding, infrastructure access, publication, product access, or a formal partnership.

Is all SecureSpace research public?

No. Some work may remain private because of confidentiality, safety, customer obligations, intellectual-property terms, or responsible disclosure.

Does SecureSpace use enterprise information to train Mintos AI?

Customer or collaborator information should not be used for model training, public research, or product development without explicit contractual and privacy arrangements.

Is Mintos AI currently available?

Mintos AI is still being developed. Only capabilities explicitly marked available should be treated as live.

Related pages

Continue through the Research section

Next step

Work on the questions that will shape secure intelligent systems.

Bring a research question, operational problem, methodology, dataset, system, or collaboration proposal.