{
  "title": "Articles/agentic-devsecops-is-basic-literacy",
  "caption": "Agentic DevSecOps Is Basic Literacy",
  "slug": "agentic-devsecops-is-basic-literacy",
  "tags": [
    "article",
    "automatic-radio",
    "education",
    "hermes-published",
    "pack-12",
    "published"
  ],
  "canonical_url": "https://mosiah.org/articles/agentic-devsecops-is-basic-literacy/",
  "interactive_url": "https://mosiah.org/#Articles%2Fagentic-devsecops-is-basic-literacy",
  "markdown_url": "https://mosiah.org/articles/agentic-devsecops-is-basic-literacy.md",
  "json_url": "https://mosiah.org/json/agentic-devsecops-is-basic-literacy.json",
  "fields": {
    "sort-date": "2026-05-12T14:05:00Z",
    "caption": "Agentic DevSecOps Is Basic Literacy",
    "created": "20260512132805699",
    "modified": "20260512132805699",
    "tags": "article hermes-published published education automatic-radio pack-12",
    "title": "Articles/agentic-devsecops-is-basic-literacy",
    "type": "text/vnd.tiddlywiki"
  },
  "text": "//Related:// [[sources|Article Sources/agentic-devsecops-is-basic-literacy]] · [[notes|Article Notes/agentic-devsecops-is-basic-literacy]] · [[metadata|Article Metadata/agentic-devsecops-is-basic-literacy]] · [[Published Pieces]]\n\n! Agentic DevSecOps Is Basic Literacy\n\n//The next computer-literacy class should teach students how to run, inspect, and govern cognitive machinery.//\n\nThe 21st-century computer-literacy curriculum is not “everyone should learn to code.”\n\nThat was too narrow. Coding matters, but the world has moved. AI changes the center of gravity. The basic skill is no longer only writing programs by hand. The basic skill is understanding and operating agentic infrastructure safely.\n\nEvery serious institution will need people who can do this. Schools, libraries, universities, nonprofits, clinics, local governments, small businesses, research groups, media organizations, and community institutions will all face the same question: how do we run AI systems that can read, write, search, summarize, cite, act, and remember without losing control of our data, our security, or our judgment?\n\nThat is not a narrow engineering question. It is civic infrastructure.\n\nThe curriculum should start with Linux, shells, SSH, filesystems, permissions, processes, and logs. Not because everyone needs to become a sysadmin, but because people should understand the substrate of computation. They should know what it means for a system to run somewhere. They should know what a process is, what a file is, what a port is, what a permission is, what a log is, and what it means to restart a service.\n\nThen Git: diffs, commits, branches, merges, reviews, rollback. Git is not just a developer tool. It is one of the most important public models for trustworthy change. It teaches that artifacts can have history, that changes can be inspected, that work can branch, that mistakes can be reverted, and that collaboration needs visible state.\n\nThen containers and microVMs. Students should understand isolation. If an agent can run commands, where does it run them? What can it access? What happens if it makes a mistake? What does it mean to give a system a sandbox? Why is approving every command not a sufficient security model? Why is it often better to let an agent run freely inside a bounded environment than to supervise it anxiously on your own machine?\n\nThen networking: DNS, TLS, reverse proxies, firewalls, APIs, webhooks. The internet is not magic. Agentic systems are increasingly made of services talking to other services. Students should understand the risks and the shape of that conversation.\n\nThen secrets: API keys, tokens, passwords, scopes, least privilege, rotation, vaults, audit logs. An AI agent with the wrong credential is not a helper. It is a liability.\n\nThen models: closed APIs, open weights, local inference, routing, context windows, embeddings, retrieval, speech-to-text, text-to-speech, image models, audio models, and model limitations. Students should know that “AI” is not one thing. It is a stack of components with different costs, risks, licenses, latencies, and failure modes.\n\nThen verifiers: tests, evals, traces, provenance checks, citation checks, human review, red-team prompts, rollback policies, and anti-Goodhart constraints. The question is not “did the model sound confident?” The question is “what evidence shows the system did the right thing?”\n\nThen artifacts: vtexts, source bundles, transcripts, claim graphs, datasets, code, notes, summaries, generated media, and public records. Students should learn that durable work is not a chat thread. Durable work has structure, history, provenance, and ownership.\n\nThis is agentic DevSecOps. The phrase sounds specialized. The underlying literacy is general.\n\nThe old computer-literacy class taught students to use office software. The next one should teach students how to run, inspect, and govern cognitive machinery.\n\nThis changes the role of libraries and schools. A library should not merely provide access to databases and computers. It should become a local knowledge infrastructure node: running models, preserving archives, hosting vtexts, teaching provenance, helping patrons use AI without surrendering their data, and maintaining public memory.\n\nA school should not merely ban or permit AI. It should teach students how AI systems work, how they fail, how to verify them, how to use them without becoming dependent on them, and how to contribute to shared knowledge responsibly.\n\nThis is basic literacy because the alternative is dependency. If only labs, hyperscalers, vendors, and consultants understand the infrastructure, then everyone else rents cognition from institutions they cannot inspect. That is not education. That is managed dependence.\n\nThe 21st century needs a different standard.\n\nStudents should be able to ask where the model is running, what data it can see, what tools it can call, what artifacts it changes, what logs it leaves, what sources it used, how it can be corrected, and how to recover if it fails.\n\nThat is not advanced.\n\nThat is the new baseline.\n"
}