Latest posts

Writing Agent Authorization as Code with Cedar

The injected call reaches the gateway. A schema, three rules, a replay of the allow and the deny, and tests that cannot pass for the wrong reason.

Oct 23, 2026 · 18 min · Authorizing AI Agents · Part 2

Who Is the Agent Acting As? Why AI Agents Become Confused Deputies

Alice asks for a ticket summary and the model emits a write to another tenant. The threat model, five principles, and the gateway that decides.

Oct 23, 2026 · 13 min · Authorizing AI Agents · Part 1