Your AI Gateway Is Holding All the Keys
The LiteLLM vulnerability chain is not just another proxy bug. AI gateways sit between users, models, provider keys, stored credentials, and prompt logs. Treat them like production security infrastructure.
Edition SevenStatusNode andri-01 · rvk-is
All systems
operational.
Andri Pétur Hafþórsson — security engineer, sysadmin, resident tech wizard in Reykjavík. I keep systems standing under load, under audit, and under a Saturday night.
NODE · ANDRI-01 HEALTHY
01 — COMPONENTS
What I keep running.
Eight services, one person, whole stack. Hover a day for the incident log. Unglamorous. Load-bearing. Works.
8 OF 8 OPERATIONALOPERATIONALDEGRADEDLAST 90 DAYS
01 · WEB
Website Design
Fast Next.js, Astro, Shopify and static sites: clear structure, real content, and hosting that stays boring.
02 · OPS
SysAdmin
Windows, Linux, macOS, DNS, access, backups, logging: infrastructure a small team can operate at 02:00 without crying.
03 · PM
Project Management
Scope, owners, delivery plans, vendor chasing. Enough process to ship, not enough to become the work.
04 · UX
User Experience
Information architecture and service flows that make the next action obvious on a phone in bad light.
05 · IT
IT Consulting
Architecture reviews, vendor selection, migrations, documentation, untangling systems that grew sideways.
06 · SEC
ISO 27001 & TPN Gold
Gap analysis, evidence collection, control mapping, audit readiness, policies written in human.
07 · AI
AI Consultation & ISO 42001
AI risk reviews, governance notes, logging expectations, operating practices that survive a question.
08 · CYBER
Cybersecurity Consultation
Threat modeling, disclosure handling, incident readiness, hardening, and very calm triage while it's already on fire.
02 — CHANGELOG
Release history.
Fifteen years across systems, security, and audit work. Every major version shipped to production. No rollbacks, several migrations.
- ISO 27001Information security
- TPN GOLDTrusted Partner Network
- ISO 42001AI management system
- v6.0 · LATEST2026–NOW
Nova
SysadminSystems administration at the telco that calls itself the biggest party venue in the world. Infrastructure, identity, and the unglamorous load-bearing parts.
- v5.02025–26
Aftra
Technical Success ManagerHelped customers see their own attack surface the way an attacker does: external attack surface management onboarding, posture, and remediation that actually lands.
- v4.02023–25
RVX
Chief Technical ArchitectLed the VFX studio through TPN Gold, rebuilt the server fleet, planned the new Cisco network, and owned data security through an office move.
- v3.02023
Isavia ANS
System AdministratorMission-critical air traffic management systems: documentation, on-call, and support for the people keeping aircraft apart. ATSEP-certified.
- v2.02020–23
Terra
System AdministratorThe whole Microsoft estate for nine branches: networks, a hundred-plus cameras, 3CX telephony, MDM, Power BI, and the procurement to match.
- v1.xBEFORE
Vodafone · Garmin · Tölvulistinn
Retail tech & helpdeskThe formative years: where you learn how computers actually break, and how people feel about it.
03 — PRODUCTS
Things I shipped.
Built under Kastro, the independent studio. Some live, some parked, one folded — every one of them taught me something.
Kastro.
Client work, useful labs, and independent products from Reykjavík. EU/EEA data residency by default. New client work is paused while I focus on a full-time role; the archive stays public.
CLIENT INTAKE PAUSEDKASTRO.IS ↗
0.4.2 BETAACTIVE
Komms
komms.org ↗
End-to-end encrypted messaging with a server-independent core. Works over the internet, LoRa, or a USB stick in a coat pocket.
SOVEREIGN MESSAGING
LIVEACTIVE
dmark
dmark.is ↗
SPF, DKIM, DMARC, BIMI and report parsing: evidence that your domain isn't trivially spoofable.
DOMAIN TRUST
ON HOLDFUTURE
Netfriður
netfridur.is ↗
Managed home-network safety for Icelandic families. Parked indefinitely: good idea, wrong year.
NETWORK SAFETY
FOLDEDLEGACY
Recover.is
recover.is ↗
Iceland-hosted immutable backup, built end to end, then folded into RunAtlas. Shipping it taught me more than keeping it would have.
BACKUP & RECOVERY
04 — FIELD NOTES
Postmortems,
written in human.
Security, privacy, and AI tooling — what broke, why, and what actually stops it. Also by newsletter and RSS.
- PM-20260616JUN 16 2026SECURITY
- PM-20260614JUN 14 2026
Your AI Report Needs a Receipt Drawer
KPMG pulled an AI usage report after apparent hallucinations. EFF keeps finding fake staff quoted by AI slop sites. The fix is boring: citations, owners, and a human who checks the receipts.
AI TOOLS - PM-20260612JUN 12 2026
The AI Act Is Being Weakened Before It Starts
EDRi says the EU AI Omnibus would delay high-risk AI safeguards and reduce public transparency. That is not boring Brussels plumbing. It is where accountability disappears.
PRIVACY - PM-20260611JUN 11 2026
AI Builders Are Production Servers Now
Langflow exploitation is a reminder that low-code AI builders, agent frameworks, and model gateways are not experiments once they touch the internet. They are production attack surface.
AI TOOLS - PM-20260607JUN 07 2026
AI Bug Hunting Is Turning Vulnerability Triage Into a Firehose
Depthfirst says an AI security agent found 21 FFmpeg zero-days for about $1,000. Chrome just patched 429 bugs. The hard part is no longer only finding flaws. It is deciding what gets fixed first.
SECURITY - PM-20260603JUN 03 2026
The Comfortable Patch Window Is Gone
Active exploitation and AI-assisted attack tooling have compressed patch timelines. Risk-based prioritisation now matters more than a comfortable monthly schedule.
SECURITY
05 — DEPENDENCIES
Who's relied on it.
Air navigation, telecom, VFX, universities. Teams where “it's down” is not an acceptable sentence.
06 — CONTACT
Open a
ticket.
No account manager, no discovery phase that bills like a mortgage. The person who does the work is the person who picks up.