<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Marissa Bellas</title><description>Writing on AI agent governance, identity, and cloud security posture.</description><link>https://marissabellas.com/</link><item><title>Agent 365 and the posture gap</title><link>https://marissabellas.com/writing/agent-365-and-the-posture-gap/</link><guid isPermaLink="true">https://marissabellas.com/writing/agent-365-and-the-posture-gap/</guid><description>Agent inventory tells you which agents exist. It doesn&apos;t tell you which ones can quietly reach your crown jewels.</description><pubDate>Tue, 08 Sep 2026 00:00:00 GMT</pubDate><category>agent governance</category><category>identity</category></item><item><title>The State of Zava: a fictional state, a real problem, a working prototype</title><link>https://marissabellas.com/writing/state-of-zava/</link><guid isPermaLink="true">https://marissabellas.com/writing/state-of-zava/</guid><description>A state CISO is accountable for hundreds of organizations they can&apos;t give orders to. I built a dashboard to find out what that actually takes.</description><pubDate>Wed, 11 Mar 2026 00:00:00 GMT</pubDate><category>government</category><category>security posture</category><category>prototyping</category></item></channel></rss>