Type · 4 pieces
Articles on AI agent authorization
Analysis and engineering notes on how AI agents get authority, how they lose it, and how task-scoped warrants bound what an agent can do.
Article
Give your agent a valet key
SalesBleed leaked Agentforce CRM data without breaking an authorization check. Why AI agents need task-scoped authority, with a runnable Tenuo example.
Read article →
Article
Per-request authorization for Temporal Nexus
Nexus allowlists decide whether a namespace may reach an endpoint. They cannot evaluate the request. Here is how task-scoped warrants close that gap without changing service contracts.
Read article →
Article
Task-scoped authorization for durable AI workflows
How Tenuo and Temporal combine durable execution with task-scoped cryptographic authorization.
Read article →
Article
Your AI agent is authorized to do everything wrong
Why identity-based authorization fails when agents act autonomously, and what warrant-based authorization looks like.
Read article →