← All posts

Type · 4 pieces

Articles on AI agent authorization

Analysis and engineering notes on how AI agents get authority, how they lose it, and how task-scoped warrants bound what an agent can do.

Article

Give your agent a valet key

SalesBleed leaked Agentforce CRM data without breaking an authorization check. Why AI agents need task-scoped authority, with a runnable Tenuo example.

  • AI agent security
  • Prompt injection
Read article →
Article

Per-request authorization for Temporal Nexus

Nexus allowlists decide whether a namespace may reach an endpoint. They cannot evaluate the request. Here is how task-scoped warrants close that gap without changing service contracts.

  • AI agent security
  • Delegation
Read article →
Article

Task-scoped authorization for durable AI workflows

How Tenuo and Temporal combine durable execution with task-scoped cryptographic authorization.

  • AI agent security
  • Delegation
Read article →
Article

Your AI agent is authorized to do everything wrong

Why identity-based authorization fails when agents act autonomously, and what warrant-based authorization looks like.

  • AI agent security
  • Prompt injection
Read article →