<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0"
     xmlns:atom="http://www.w3.org/2005/Atom"
     xmlns:content="http://purl.org/rss/1.0/modules/content/">
  <channel>
    <title>Tenuo Engineering Blog</title>
    <link>https://tenuo.ai/blog/</link>
    <description>Engineering notes on task-scoped authorization, delegated authority, and secure AI agent workflows.</description>
    <language>en-us</language>
    <lastBuildDate>Tue, 06 Oct 2026 04:32:47 +0000</lastBuildDate>
    <atom:link href="https://tenuo.ai/blog/feed.xml" rel="self" type="application/rss+xml" />



    <item>
      <title>Let Authority Follow the Work: Tenuo for NVIDIA OpenShell</title>
      <link>https://tenuo.ai/blog/authority-for-agents-openshell.html</link>
      <guid isPermaLink="true">https://tenuo.ai/blog/authority-for-agents-openshell.html</guid>
      <pubDate>Mon, 05 Oct 2026 00:00:00 +0000</pubDate>
      <description>How NVIDIA OpenShell and Tenuo combine secure execution with task-scoped authority that can move across tools, sandboxes, and agent handoffs.</description>
      <content:encoded><![CDATA[<p><a href="https://tenuo.ai/blog/authority-for-agents-openshell.html"><img src="https://tenuo.ai/images/brand/art-delegation.png" alt="Let Authority Follow the Work: Tenuo for NVIDIA OpenShell" width="600" style="max-width:100%;height:auto"></a></p><p>How NVIDIA OpenShell and Tenuo combine secure execution with task-scoped authority that can move across tools, sandboxes, and agent handoffs.</p><p><a href="https://tenuo.ai/blog/authority-for-agents-openshell.html">Read the article on tenuo.ai</a></p>]]></content:encoded>
    </item>



    <item>
      <title>Give your agent a valet key</title>
      <link>https://tenuo.ai/blog/give-your-agent-a-valet-key.html</link>
      <guid isPermaLink="true">https://tenuo.ai/blog/give-your-agent-a-valet-key.html</guid>
      <pubDate>Fri, 02 Oct 2026 00:00:00 +0000</pubDate>
      <description>SalesBleed leaked Agentforce CRM data without breaking an authorization check. Why AI agents need task-scoped authority, with a runnable Tenuo example.</description>
      <content:encoded><![CDATA[<p><a href="https://tenuo.ai/blog/give-your-agent-a-valet-key.html"><img src="https://tenuo.ai/images/og-give-your-agent-a-valet-key.png" alt="Give your agent a valet key — what SalesBleed teaches about task-scoped authority for AI agents" width="600" style="max-width:100%;height:auto"></a></p><p>SalesBleed leaked Agentforce CRM data without breaking an authorization check. Why AI agents need task-scoped authority, with a runnable Tenuo example.</p><p><a href="https://tenuo.ai/blog/give-your-agent-a-valet-key.html">Read the article on tenuo.ai</a></p>]]></content:encoded>
    </item>



    <item>
      <title>Jev in practice: typed decisions, scoped authority</title>
      <link>https://tenuo.ai/blog/jev-scoped-authority</link>
      <guid isPermaLink="true">https://tenuo.ai/blog/jev-scoped-authority</guid>
      <pubDate>Mon, 21 Sep 2026 00:00:00 +0000</pubDate>
      <description>How Jev&apos;s typed probabilistic decisions, LangGraph workflows, and Tenuo task-scoped warrants combine in a dependency upgrade agent.</description>
      <content:encoded><![CDATA[<p><a href="https://tenuo.ai/blog/jev-scoped-authority"><img src="https://tenuo.ai/images/og-safe-agent-delegation-jev-langgraph-tenuo.png" alt="Jev in practice: typed decisions, scoped authority" width="600" style="max-width:100%;height:auto"></a></p><p>How Jev&#39;s typed probabilistic decisions, LangGraph workflows, and Tenuo task-scoped warrants combine in a dependency upgrade agent.</p><p><a href="https://tenuo.ai/blog/jev-scoped-authority">Read the article on tenuo.ai</a></p>]]></content:encoded>
    </item>



    <item>
      <title>Per-request authorization for Temporal Nexus</title>
      <link>https://tenuo.ai/blog/temporal-nexus-authorization.html</link>
      <guid isPermaLink="true">https://tenuo.ai/blog/temporal-nexus-authorization.html</guid>
      <pubDate>Thu, 03 Sep 2026 00:00:00 +0000</pubDate>
      <description>Nexus allowlists decide whether a namespace may reach an endpoint. They cannot evaluate the request. Here is how task-scoped warrants close that gap without changing service contracts.</description>
      <content:encoded><![CDATA[<p><a href="https://tenuo.ai/blog/temporal-nexus-authorization.html"><img src="https://tenuo.ai/images/og-temporal-nexus-authorization.png" alt="Per-request authorization for Temporal Nexus — task-scoped authority across namespace boundaries" width="600" style="max-width:100%;height:auto"></a></p><p>Nexus allowlists decide whether a namespace may reach an endpoint. They cannot evaluate the request. Here is how task-scoped warrants close that gap without changing service contracts.</p><p><a href="https://tenuo.ai/blog/temporal-nexus-authorization.html">Read the article on tenuo.ai</a></p>]]></content:encoded>
    </item>



    <item>
      <title>Task-scoped authorization for durable AI workflows</title>
      <link>https://tenuo.ai/blog/temporal-partnership.html</link>
      <guid isPermaLink="true">https://tenuo.ai/blog/temporal-partnership.html</guid>
      <pubDate>Wed, 27 May 2026 00:00:00 +0000</pubDate>
      <description>How Tenuo and Temporal combine durable execution with task-scoped cryptographic authorization.</description>
      <content:encoded><![CDATA[<p><a href="https://tenuo.ai/blog/temporal-partnership.html"><img src="https://tenuo.ai/images/og-temporal-partnership.png" alt="Task-scoped authorization for durable AI workflows" width="600" style="max-width:100%;height:auto"></a></p><p>How Tenuo and Temporal combine durable execution with task-scoped cryptographic authorization.</p><p><a href="https://tenuo.ai/blog/temporal-partnership.html">Read the article on tenuo.ai</a></p>]]></content:encoded>
    </item>



    <item>
      <title>Tenuo against the OWASP Top 10 for Agentic Applications</title>
      <link>https://tenuo.ai/owasp</link>
      <guid isPermaLink="true">https://tenuo.ai/owasp</guid>
      <pubDate>Wed, 06 May 2026 00:00:00 +0000</pubDate>
      <description>How Tenuo maps to the OWASP Top 10 for Agentic Applications with enforcement-focused coverage across ASI01-ASI10.</description>
      <content:encoded><![CDATA[<p><a href="https://tenuo.ai/owasp"><img src="https://tenuo.ai/images/og-owasp-agentic.png" alt="Tenuo against the OWASP Top 10 for Agentic Applications" width="600" style="max-width:100%;height:auto"></a></p><p>How Tenuo maps to the OWASP Top 10 for Agentic Applications with enforcement-focused coverage across ASI01-ASI10.</p><p><a href="https://tenuo.ai/owasp">Read the article on tenuo.ai</a></p>]]></content:encoded>
    </item>



    <item>
      <title>Tenuo and the EU AI Act</title>
      <link>https://tenuo.ai/eu-act</link>
      <guid isPermaLink="true">https://tenuo.ai/eu-act</guid>
      <pubDate>Wed, 06 May 2026 00:00:00 +0000</pubDate>
      <description>How Tenuo&apos;s execution-time authorization controls map to key EU AI Act obligations for high-risk AI systems.</description>
      <content:encoded><![CDATA[<p><a href="https://tenuo.ai/eu-act"><img src="https://tenuo.ai/images/og-eu-ai-act.png" alt="Tenuo and the EU AI Act for high-risk AI systems" width="600" style="max-width:100%;height:auto"></a></p><p>How Tenuo&#39;s execution-time authorization controls map to key EU AI Act obligations for high-risk AI systems.</p><p><a href="https://tenuo.ai/eu-act">Read the article on tenuo.ai</a></p>]]></content:encoded>
    </item>



    <item>
      <title>Your AI agent is authorized to do everything wrong</title>
      <link>https://tenuo.ai/blog/agent-auth.html</link>
      <guid isPermaLink="true">https://tenuo.ai/blog/agent-auth.html</guid>
      <pubDate>Tue, 31 Mar 2026 00:00:00 +0000</pubDate>
      <description>Why identity-based authorization fails when agents act autonomously, and what warrant-based authorization looks like.</description>
      <content:encoded><![CDATA[<p><a href="https://tenuo.ai/blog/agent-auth.html"><img src="https://tenuo.ai/images/og-image.png" alt="Your AI agent is authorized to do everything wrong" width="600" style="max-width:100%;height:auto"></a></p><p>Why identity-based authorization fails when agents act autonomously, and what warrant-based authorization looks like.</p><p><a href="https://tenuo.ai/blog/agent-auth.html">Read the article on tenuo.ai</a></p>]]></content:encoded>
    </item>



    <item>
      <title>Authorization for Agentic Systems</title>
      <link>https://tenuo.ai/thesis.html</link>
      <guid isPermaLink="true">https://tenuo.ai/thesis.html</guid>
      <pubDate>Thu, 26 Feb 2026 00:00:00 +0000</pubDate>
      <description>Why identity and role-based access control leave an authorization gap for autonomous agents, and how task-scoped warrants close it across delegation chains.</description>
      <content:encoded><![CDATA[<p><a href="https://tenuo.ai/thesis.html"><img src="https://tenuo.ai/images/og-image.png" alt="Authorization for Agentic Systems" width="600" style="max-width:100%;height:auto"></a></p><p>Why identity and role-based access control leave an authorization gap for autonomous agents, and how task-scoped warrants close it across delegation chains.</p><p><a href="https://tenuo.ai/thesis.html">Read the article on tenuo.ai</a></p>]]></content:encoded>
    </item>

  </channel>
</rss>
