@inproceedings{raptors2026-c033,
  title     = {{When AI Agents Move to the Cloud: Infrastructure and Security in the Agentic Era}},
  author    = {Adatiya, Khushan},
  booktitle = {Proceedings of the Raptors Conference},
  volume    = {1},
  year      = {2026},
  publisher = {Hackathon Raptors},
  address   = {London, United Kingdom},
  doi       = {10.68495/rc.2026.C033},
  url       = {https://doi.org/10.68495/rc.2026.C033},
  abstract  = {OpenClaw went from a weekend project to more than 200,000 GitHub stars in weeks, and developers began spinning up cloud VMs to run autonomous agents around the clock. Cloud infrastructure was built for stateless, request-driven workloads, and agents are none of those things: they hold state, wake on timers unprompted, inherit broad system permissions, and chain API calls, file operations and browser sessions in ways nobody planned for. This paper covers what breaks at that meeting point. It begins with the architecture mismatch, why serverless and container platforms struggle with stateful, long-running, proactive workloads, then turns to the security surface: supply chain attacks through unvetted skill repositories, prompt injection as an infrastructure-level threat, and the gap in cloud IAM for non-human agent identities, grounded in real incidents and the OWASP Top 10 for Agentic Applications. It closes on what works, drawing reliability patterns from SRE practice: least-privilege scoping, container isolation, observability for agent workflows, and error budgets for destructive actions.}
}