<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Marissa Bellas</title><description>Writing on AI agent governance, identity, and cloud security posture.</description><link>https://marissabellas.com/</link><item><title>Agent 365 and the posture gap</title><link>https://marissabellas.com/writing/agent-365-and-the-posture-gap/</link><guid isPermaLink="true">https://marissabellas.com/writing/agent-365-and-the-posture-gap/</guid><description>Agent inventory tells you which agents exist. It doesn&apos;t tell you which ones can quietly reach your crown jewels.</description><pubDate>Tue, 08 Sep 2026 00:00:00 GMT</pubDate><category>agent governance</category><category>cspm</category><category>microsoft</category></item><item><title>What least privilege means when the principal isn&apos;t a person</title><link>https://marissabellas.com/writing/scoping-agent-permissions/</link><guid isPermaLink="true">https://marissabellas.com/writing/scoping-agent-permissions/</guid><description>Placeholder — swap in your second piece. Human least privilege assumes a human review cadence that agents outrun.</description><pubDate>Fri, 14 Aug 2026 00:00:00 GMT</pubDate><category>identity</category><category>least privilege</category></item></channel></rss>