Engineering Blog

Notes on building task-scoped authorization for AI agents, from protocol design through SDKs and integrations to production implementation patterns.

Per-request authorization for Temporal Nexus

Nexus allowlists decide whether a namespace may reach an endpoint. They cannot evaluate the request. Here is how task-scoped warrants close that gap without changing service contracts.

Read article →

Task-scoped authorization for durable AI workflows

How Tenuo and Temporal combine durable execution with task-scoped cryptographic authorization.

Read article →

Your AI agent is authorized to do everything wrong

Why identity-based authorization fails when agents act autonomously, and what warrant-based authorization looks like.

Read article →

Guides and research

Deeper technical arguments, standards mappings, and practical guidance from the Tenuo team.