What we learn building covey: how the platform works, why it is built this way, and what proves itself in practice when AI agents are managed like employees.https://covey.work/en-GBhttps://covey.work/blog/why-an-agent-never-sees-its-own-credentialshttps://covey.work/blog/why-an-agent-never-sees-its-own-credentialsHow covey brokers access to target systems at runtime: short-lived, scoped tokens that never sit in the sandbox as long-lived secrets.Thu, 03 Sep 2026 12:00:00 GMTProductEngineeringhttps://covey.work/blog/ai-agent-egress-controlhttps://covey.work/blog/ai-agent-egress-controlHow covey uses a proxy allowlist and hard network isolation to control what an agent sandbox can reach.Thu, 03 Sep 2026 12:00:00 GMTProductEngineeringhttps://covey.work/blog/website-and-product-splithttps://covey.work/blog/website-and-product-splitWhy publishing a blog post used to mean deploying the platform, what that had to do with self-hosters, and what we built instead.Sat, 29 Aug 2026 12:00:00 GMTEngineeringBehind the sceneshttps://covey.work/blog/where-an-agent-workshttps://covey.work/blog/where-an-agent-worksEvery agent gets an isolated working environment of its own. How it is built, what survives a restart, and how it is spread across servers you run yourself.Sat, 22 Aug 2026 12:00:00 GMTProductEngineeringhttps://covey.work/blog/how-an-agent-gets-accesshttps://covey.work/blog/how-an-agent-gets-accessAn agent is meant to work in Zammad, GitLab or Kubernetes. How it gets in, who holds the credentials, and why they never sit in its working environment.Wed, 19 Aug 2026 12:00:00 GMTProductEngineeringhttps://covey.work/blog/proposals-that-do-not-runhttps://covey.work/blog/proposals-that-do-not-runCovey Doctor reviews the other agents and the platform itself. Why it may not change anything, and why an approval records the exact values a person read.Sat, 15 Aug 2026 12:00:00 GMTProductSecurityhttps://covey.work/blog/how-we-measure-agent-outputhttps://covey.work/blog/how-we-measure-agent-outputNo model awards a grade here. We count verifiable events instead. Why we chose that, and why an agent never gets to see the rule it is measured by.Thu, 13 Aug 2026 12:00:00 GMTProductMetrics