Detailed case studies from engineers at Dropbox and Google, standards recognition, and external coverage.
End-to-end warrant gating for MCP tool calls on Kubernetes, with Tenuo Cloud handling trigger minting and cross-cluster audit. Scope-gated rollout across 16 agents, multi-hop delegation at depth 2 and 3, and a live prompt injection the warrant catches.
Read the post →Tenuo embedded in a homelab MCP server whose write tools restart and scale real Kubernetes deployments. After a Discord approval, the server mints a 60-second warrant for that one call: one function, one deployment, one namespace. Anything else fails closed.
Read the post →NIST's summary of public comments on its agent identity concept paper. Under delegation and chaining, it lists attenuated-token proposals, citing the AAT Internet-Draft, among the efforts that point toward explicit, scoped delegation rather than inherited user entitlements.
Read the summary →The project lists Tenuo in its AI security solutions landscape, highlighting cryptographically signed task-scoped authorization, subtractive delegation, and audit capabilities for agent deployments.
View the listing →Survey of emerging standards for multi-hop agent delegation. The AAT Internet-Draft is cited as a standards-track approach to offline-verifiable attenuation chains.
Read the post →A2A standardizes how agents talk, not what authority travels with the request. Tenuo's AAT Internet-Draft is treated as the proposal that takes monotonic narrowing furthest: per-argument constraints, offline child minting, and verification from the root issuer key alone.
Read the post →Independent pattern write-up of signed, append-only delegation chains that a verifier can reject for widening without calling the issuer. The AAT Internet-Draft is listed among the references.
Read the pattern →WIMSE individual draft for offline-verifiable attenuated delegation chains. It shares its approach with the AAT Internet-Draft and is intended to converge with it.
Read the draft →WIMSE individual draft for an online Delegation Server. AAT is cited as the offline, holder-attenuable counterpart with the same goal and a different trust model.
Read the draft →Report from IIW 42 at the Computer History Museum. Covers the Demo Hour where Niki Niyikiza showed Tenuo's attenuating authorization tokens that cryptographically narrow an agent's capabilities at each delegation hop.
Read the report →Individual Internet-Draft published in the IETF OAuth Working Group defining Attenuating Authorization Tokens for agentic delegation chains. Tenuo is the canonical reference implementation.
View on IETF Datatracker →Talk by Niki Aimable Niyikiza. Ranked #3 of 12 must-see talks at Unprompted 2026. Includes a live demo where a prompt injection is stopped at the execution layer without touching the model.
View on GrepTalks →