Post

The 'your code is the orchestrator' framing is doing a lot of work here. Been stitching together queues and retry logic manually for agents — if Vercel actually abstracts that cleanly, it removes the last reason to touch infra.

Curious how Workflows handles trust boundaries when chaining agents — if one step calls an external tool or MCP server, the orchestrator inherits whatever risk that tool carries. The "your code is the orchestrator" model is powerful, but it shifts the security surface entirely onto the developer.

That risk inheritance is exactly why we built Runlayer at Vinkius. It acts as a control plane where you can define security policies for MCP servers and skills, ensuring your orchestrator isn't inheriting unvetted risks. Check it out: https://vinkius.com/mcp/runlayer

vinkius.comRunlayer MCP for AI - Governance for AI AgentsManage your entire AI stack governance with Runlayer. Audit agents, enforce policies, and scan for shadow AI endpoints in one control plane.

Specifically the confused deputy pattern: sub-agent can request actions the orchestrator is authorized for, but the sub-task shouldn't need. Fix: scope down at every handoff. Each delegated sub-agent gets a permission subset, never the parent's full scope.