Tenuo in the Wild

End-to-end warrant gating for MCP tool calls on Kubernetes, with Tenuo Cloud handling trigger minting and cross-cluster audit. Scope-gated rollout across 16 agents, multi-hop delegation at depth 2 and 3, and a live prompt injection the warrant catches.

Tenuo embedded in a homelab MCP server whose write tools restart and scale real Kubernetes deployments. After a Discord approval, the server mints a 60-second warrant for that one call: one function, one deployment, one namespace. Anything else fails closed.

NIST's summary of public comments on its agent identity concept paper. Under delegation and chaining, it lists attenuated-token proposals, citing the AAT Internet-Draft, among the efforts that point toward explicit, scoped delegation rather than inherited user entitlements.

The project lists Tenuo in its AI security solutions landscape, highlighting cryptographically signed task-scoped authorization, subtractive delegation, and audit capabilities for agent deployments.

Survey of emerging standards for multi-hop agent delegation. The AAT Internet-Draft is cited as a standards-track approach to offline-verifiable attenuation chains.

A2A standardizes how agents talk, not what authority travels with the request. Tenuo's AAT Internet-Draft is treated as the proposal that takes monotonic narrowing furthest: per-argument constraints, offline child minting, and verification from the root issuer key alone.

Independent pattern write-up of signed, append-only delegation chains that a verifier can reject for widening without calling the issuer. The AAT Internet-Draft is listed among the references.

WIMSE individual draft for offline-verifiable attenuated delegation chains. It shares its approach with the AAT Internet-Draft and is intended to converge with it.

WIMSE individual draft for an online Delegation Server. AAT is cited as the offline, holder-attenuable counterpart with the same goal and a different trust model.

Report from IIW 42 at the Computer History Museum. Covers the Demo Hour where Niki Niyikiza showed Tenuo's attenuating authorization tokens that cryptographically narrow an agent's capabilities at each delegation hop.

Individual Internet-Draft published in the IETF OAuth Working Group defining Attenuating Authorization Tokens for agentic delegation chains. Tenuo is the canonical reference implementation.

Talk by Niki Aimable Niyikiza. Ranked #3 of 12 must-see talks at Unprompted 2026. Includes a live demo where a prompt injection is stopped at the execution layer without touching the model.