1 post

Posts on authorization

On building, running and keeping control of your own agents.

Agent authorization is the gap that identity misses

Who an agent is matters less than what it's allowed to do. Frameworks ship auth-n but leave the scoping that actually contains blast radius to you.