Replit details the security architecture behind its Agent Habitat for agent work

Replit published the architecture behind Agent Habitat, the offering that gives agents access to company knowledge and systems inside boundaries the company controls. The post sets out four principles: least authority for agents, containment of failures, accountable production changes, and governable delegated work. Replit says its existing microVM isolation prevented exploitation of recently disclosed Linux kernel vulnerabilities, and that connector credentials stay outside the agent's context, with a credential broker authorizing each request before retrieving secrets from a vault.