Giving bash to Brex's audit agent - Ship 26 NYC
About 5% of all corporate spend is out of policy. The hard question is: which 5%? Recorded live at Vercel Ship 2026 in New York City, Brandon Bloom (Director of Engineering at Brex) explains why Brex gave its audit agent a bash shell, and what happened when they did. CHAPTERS 0:00 The audit challenge: which 5%? 1:17 Real expense policies are weird 2:30 Creative abuse needs a creative agent 4:02 The naive tool-calling trap 4:26 "I'll replace you with a very small shell script" 5:35 just-bash: a sandboxed shell for agents 8:11 Unix philosophy and context management 12:36 Hallucinated flags are feature requests 14:24 Your agent is in the marble LINKS just-bash on GitHub → https://github.com/vercel-labs/just-bash Ship 2026 recap → https://vercel.com/blog/vercel-ship-2026-recap Start building → https://vercel.com Brex → https://www.brex.com FOLLOW VERCEL X → https://x.com/vercel LinkedIn → https://www.linkedin.com/company/vercel GitHub → https://github.com/vercel #Vercel #VercelShip #AIAgents #AI #Brex #DevTools