Writing Agent Authorization as Code with Cedar
The injected call reaches the gateway. A schema, three rules, a replay of the allow and the deny, and tests that cannot pass for the wrong reason.
Security
Threat models, controls, and the tests that keep them honest.
Who Is the Agent Acting As? Why AI Agents Become Confused Deputies
Alice asks for a ticket summary and the model emits a write to another tenant. The threat model, five principles, and the gateway that decides.