# Engineering Blog

Source: https://tenuo.ai/blog/

> Articles, tutorials, guides and research on AI agent security, delegated authority and task-scoped authorization.

## Posts

- [We attacked OWASP FinBot with Promptfoo. Tenuo blocked every successful exploit. (2026-10-14)](https://tenuo.ai/blog/red-teaming-owasp-finbot.md): We red-teamed OWASP FinBot's AI agents with Promptfoo, with Tenuo on and off. As shipped, 50 attacks got through. With Tenuo, none did.
- [Personal agents that both sides can trust (2026-10-13)](https://tenuo.ai/blog/personal-agents-both-sides-can-trust.md): Personal agents now sign in via PACT and PAP. Task-scoped warrants add the customer's own terms, checked at the API, with receipts both sides can verify.
- [Most companies have an AI policy. Very few can enforce it. (2026-10-06)](https://tenuo.ai/blog/ai-policy-enforcement-gap.md): 87% of IT leaders say an AI agent reached data it shouldn't have. Why written AI policy breaks down at runtime, and how per-task warrants enforce it.
- [Let Authority Follow the Work: Tenuo for NVIDIA OpenShell (2026-10-05)](https://tenuo.ai/blog/authority-for-agents-openshell.md): How NVIDIA OpenShell and Tenuo combine secure execution with task-scoped authority that can move across tools, sandboxes, and agent handoffs.
- [Give your agent a valet key (2026-10-02)](https://tenuo.ai/blog/give-your-agent-a-valet-key.md): SalesBleed leaked Agentforce CRM data without breaking an authorization check. Why AI agents need task-scoped authority, with a runnable Tenuo example.
- [Jev in practice: typed decisions, scoped authority (2026-09-21)](https://tenuo.ai/blog/jev-scoped-authority.md): How Jev's typed probabilistic decisions, LangGraph workflows, and Tenuo task-scoped warrants combine in a dependency upgrade agent.
- [Per-request authorization for Temporal Nexus (2026-09-03)](https://tenuo.ai/blog/temporal-nexus-authorization.md): Nexus allowlists decide whether a namespace may reach an endpoint. They cannot evaluate the request. Here is how task-scoped warrants close that gap without changing service contracts.
- [Task-scoped authorization for durable AI workflows (2026-05-27)](https://tenuo.ai/blog/temporal-partnership.md): How Tenuo and Temporal combine durable execution with task-scoped cryptographic authorization.
- [Your AI agent is authorized to do everything wrong (2026-03-31)](https://tenuo.ai/blog/agent-auth.md): Why identity-based authorization fails when agents act autonomously, and what warrant-based authorization looks like.