63 Tags
- Kerberos Won Because Nobody Had to Implement It
The SSPI Question for Agent Authorization
- A Blocked Agent Is a Captive Client
- The Convergence and the Wagers
The Outside Evidence, the Named Bets, and the Handbook's Close
- AAuth Now Has a Mission Layer
- Open-World OAuth Still Needs Mission Shaping
View all 6- The Agent Provider Is the IdP: A Standards Reading of WorkOS auth.md
View tag- Kerberos Won Because Nobody Had to Implement It
The SSPI Question for Agent Authorization
- The Runtime Mints the Identity. That Does Not Make It the Authority.
The Agent Identity Market Will Be Decided at the Binding Layer
- Agent Authority Has No General System of Record
The Third Control Point Is the Approved Task, and Its General Record Does Not Exist Yet
- The MCP Lesson
Running Code Creates the Wedge. Governance Consolidates What Survives.
- Cross App Access Shows How the Layered Play Ships
The MCP Extension Is Stable. The First Loop Is Live. The Partner Ecosystem Is Still Rolling Out.
View all 63- Welcome to Control Plane
View tag- Authorization Is the Other Half of Executable Intent
Evals Made Intent Executable for Verification. A Mission Makes It Executable for Authorization.
View tag- Making Compliance a By-Product
What NIST AI RMF, the EU AI Act, and ISO/IEC 42001 Ask Agents to Prove
View tag- Mission Shaping Is Not Enough
- The Mission Shaping Problem
- Why Mission-Bound OAuth Might Be the Wrong Answer
View tag- The Agent Provider Is the IdP: A Standards Reading of WorkOS auth.md
View tag- Kerberos Won Because Nobody Had to Implement It
The SSPI Question for Agent Authorization
- Agent Authority Has No General System of Record
The Third Control Point Is the Approved Task, and Its General Record Does Not Exist Yet
- A Blocked Agent Is a Captive Client
- The Company's Memory Must Be an Enterprise Record
Inference Is Rented. Institutional Knowledge Must Survive the Supplier.
- Continuity Is Not One Thing
The Four Questions of Delegated Work, and the Invariants That Compose Their Answers
View all 57- Agent Authority Has No General System of Record
The Third Control Point Is the Approved Task, and Its General Record Does Not Exist Yet
- A Blocked Agent Is a Captive Client
- Mission-Bound Authorization: The Standards Map
OAuth, WIMSE, and OpenID, Mapped to the Architecture
- Mission-Bound Authorization on the Wire
The Q3 Board Packet, Exhibit by Exhibit
- Mission-Based Authorization: The Field Reference
The Category, the Litmus Test, the Landscape, and the Running Example
View all 18- A Blocked Agent Is a Captive Client
View tag- ID-JAG Beyond the Enterprise IdP
View tag- Client Instances Are Actors, Not New Clients
View tag- Client Instances Are Actors, Not New Clients
View tag- Least Exposure Is Broader Than Least Privilege
Bounding What an Agent May See, Not Just What It May Do
View tag- A Blocked Agent Is a Captive Client
- Continuity Is Not One Thing
The Four Questions of Delegated Work, and the Invariants That Compose Their Answers
- Common Objections to Mission-Based Authorization
Answers for the People Who Run Today's Control Planes
- The Question Authorization Never Answered
A History of Delegated Authority, from Passwords to Missions
- Answering the Laws of AIdentity
A Critical Crosswalk from Patrick Parker's Seven Laws to Mission-Bound Authorization
View all 19- Client Instances Are Actors, Not New Clients
- Standardize `act` Across Assertion Grants and JWT Access Tokens
View tag- Trusting Issuers in Open-World OAuth
Identity Assertion Trust Framework and Domain-Authorized Issuer Trust Method
View tag- A Blocked Agent Is a Captive Client
View tag- Welcome to Control Plane
View tag- Enterprise SaaS Needs OAuth Federation Now
View tag- SAML at the Post-Quantum Crossroads
View tag- Authorization Is the Other Half of Executable Intent
Evals Made Intent Executable for Verification. A Mission Makes It Executable for Authorization.
View tag- The Runtime Mints the Identity. That Does Not Make It the Authority.
The Agent Identity Market Will Be Decided at the Binding Layer
- Trusting Issuers in Open-World OAuth
Identity Assertion Trust Framework and Domain-Authorized Issuer Trust Method
View tag- Least-Privilege MCP Tool Calls Need a Mission
Token-Side and Resource-Side Authorization Are Two Projections of One Approved Task
- Least Exposure Is Broader Than Least Privilege
Bounding What an Agent May See, Not Just What It May Do
- Closing the Gaps in Least-Privilege MCP Tool Calls
AuthZEN, ARAP, and the Task Neither Names
- Two Models for Least-Privilege MCP Tool Calls
Carry Authority in a Token, or Decide at the Resource
View tag- Continuity Is Not One Thing
The Four Questions of Delegated Work, and the Invariants That Compose Their Answers
- The Continuity Evaluation Kit
A Vocabulary, a Rubric, and a Living Map for the Four Questions
- Mission-Bound Authorization: The Glossary
The Handbook's Vocabulary, A to Z
- The Mission-Based Authorization Vendor Test
Six Questions for Anyone Claiming Agent Authorization
- Common Objections to Mission-Based Authorization
Answers for the People Who Run Today's Control Planes
View all 29- Continuity Is Not One Thing
The Four Questions of Delegated Work, and the Invariants That Compose Their Answers
- The Identity Continuation Assertion
- Trusting Issuers in Open-World OAuth
Identity Assertion Trust Framework and Domain-Authorized Issuer Trust Method
- Re-Subjecting Is a Mint, Not an Attenuation
- The Agent Provider Is the IdP: A Standards Reading of WorkOS auth.md
View all 8- Welcome to Control Plane
View tag- Continuity Is Not One Thing
The Four Questions of Delegated Work, and the Invariants That Compose Their Answers
- The Continuity Evaluation Kit
A Vocabulary, a Rubric, and a Living Map for the Four Questions
- The Identity Continuation Assertion
- Re-Subjecting Is a Mint, Not an Attenuation
View tag- Mission-Based Authorization: The Field Reference
The Category, the Litmus Test, the Landscape, and the Running Example
- The Agent Runtime and Audit
Sessions Are Not Authority, Safe Unwinding, and Tamper-Evident Evidence
- Mission Lifecycle and Change
Observe, Revoke, Grow, Complete
- Mission-Bound Runtime Enforcement
From Mission-Bound Tokens to Mission-Bound Actions
- Mission-Bound Authority: Instances, Actors, and Delegation
From Authenticated Agent Identity to Bounded, Narrowing Authority
View all 9- Mission-Bound Authorization: The Standards Map
OAuth, WIMSE, and OpenID, Mapped to the Architecture
- Mission-Bound Authorization on the Wire
The Q3 Board Packet, Exhibit by Exhibit
- Mission-Based Authorization: The Field Reference
The Category, the Litmus Test, the Landscape, and the Running Example
- The Convergence and the Wagers
The Outside Evidence, the Named Bets, and the Handbook's Close
- The Authority Control Plane
Where the Layer Sits in the Estate
View all 17- The Runtime Mints the Identity. That Does Not Make It the Authority.
The Agent Identity Market Will Be Decided at the Binding Layer
- Agent Authority Has No General System of Record
The Third Control Point Is the Approved Task, and Its General Record Does Not Exist Yet
- The MCP Lesson
Running Code Creates the Wedge. Governance Consolidates What Survives.
- Cross App Access Shows How the Layered Play Ships
The MCP Extension Is Stable. The First Loop Is Live. The Partner Ecosystem Is Still Rolling Out.
- The Company's Memory Must Be an Enterprise Record
Inference Is Rented. Institutional Knowledge Must Survive the Supplier.
View all 6- SAML at the Post-Quantum Crossroads
View tag- Client Instances Are Actors, Not New Clients
- Standardize `act` Across Assertion Grants and JWT Access Tokens
View tag- Standardize `act` Across Assertion Grants and JWT Access Tokens
View tag- Kerberos Won Because Nobody Had to Implement It
The SSPI Question for Agent Authorization
View tag- Kerberos Won Because Nobody Had to Implement It
The SSPI Question for Agent Authorization
- The MCP Lesson
Running Code Creates the Wedge. Governance Consolidates What Survives.
- Cross App Access Shows How the Layered Play Ships
The MCP Extension Is Stable. The First Loop Is Live. The Partner Ecosystem Is Still Rolling Out.
- Least-Privilege MCP Tool Calls Need a Mission
Token-Side and Resource-Side Authorization Are Two Projections of One Approved Task
- Least Exposure Is Broader Than Least Privilege
Bounding What an Agent May See, Not Just What It May Do
View all 10- Authorization Denied Is No Longer Enough
- AAuth Now Has a Mission Layer
- Open-World OAuth Still Needs Mission Shaping
View tag- Mission-Bound Authorization: The Glossary
The Handbook's Vocabulary, A to Z
- Mission-Bound Authorization: The Standards Map
OAuth, WIMSE, and OpenID, Mapped to the Architecture
- The Mission-Based Authorization Vendor Test
Six Questions for Anyone Claiming Agent Authorization
- Common Objections to Mission-Based Authorization
Answers for the People Who Run Today's Control Planes
- Mission-Bound Authorization on the Wire
The Q3 Board Packet, Exhibit by Exhibit
View all 24- Kerberos Won Because Nobody Had to Implement It
The SSPI Question for Agent Authorization
- The Runtime Mints the Identity. That Does Not Make It the Authority.
The Agent Identity Market Will Be Decided at the Binding Layer
- Agent Authority Has No General System of Record
The Third Control Point Is the Approved Task, and Its General Record Does Not Exist Yet
- The MCP Lesson
Running Code Creates the Wedge. Governance Consolidates What Survives.
- Cross App Access Shows How the Layered Play Ships
The MCP Extension Is Stable. The First Loop Is Live. The Partner Ecosystem Is Still Rolling Out.
View all 49- Trusting Issuers in Open-World OAuth
Identity Assertion Trust Framework and Domain-Authorized Issuer Trust Method
View tag- SAML at the Post-Quantum Crossroads
- The Agent Provider Is the IdP: A Standards Reading of WorkOS auth.md
- ID-JAG Beyond the Enterprise IdP
- OAuth for Open-World Ecosystems
- Client Context and ID-JAG for Mission-Bound OAuth
View tag- Containing the OWASP Agentic Threats
Fifteen Agentic Threats and the LLM Top 10, Each Given a Verdict
View tag- Welcome to Control Plane
View tag- SAML at the Post-Quantum Crossroads
View tag- Least Exposure Is Broader Than Least Privilege
Bounding What an Agent May See, Not Just What It May Do
View tag- Standardize `act` Across Assertion Grants and JWT Access Tokens
View tag- Least-Privilege MCP Tool Calls Need a Mission
Token-Side and Resource-Side Authorization Are Two Projections of One Approved Task
- Closing the Gaps in Least-Privilege MCP Tool Calls
AuthZEN, ARAP, and the Task Neither Names
- Two Models for Least-Privilege MCP Tool Calls
Carry Authority in a Token, or Decide at the Resource
View tag- SAML at the Post-Quantum Crossroads
View tag- Mission Shaping Is Not Enough
- The Mission Shaping Problem
View tag- The Mission-Based Authorization Vendor Test
Six Questions for Anyone Claiming Agent Authorization
- Containing the OWASP Agentic Threats
Fifteen Agentic Threats and the LLM Top 10, Each Given a Verdict
- Splitting the Lethal Trifecta
How Mission-Bound Authorization Contains the Defining Agent Threat Model
- Canceling the Card Doesn't Stop the Charges
Endings, Unwindings, and the Statement That Reconciles It All
- The Network Approves Every Transaction, Not the Card
Per-Action Authorization, and the Escape Hatch Called Cash
View all 12- Sessions Are Not Missions
Why Agent Harnesses Cannot Own the Mission Layer
View tag- Kerberos Won Because Nobody Had to Implement It
The SSPI Question for Agent Authorization
- The Runtime Mints the Identity. That Does Not Make It the Authority.
The Agent Identity Market Will Be Decided at the Binding Layer
- Agent Authority Has No General System of Record
The Third Control Point Is the Approved Task, and Its General Record Does Not Exist Yet
- The MCP Lesson
Running Code Creates the Wedge. Governance Consolidates What Survives.
- Cross App Access Shows How the Layered Play Ships
The MCP Extension Is Stable. The First Loop Is Live. The Partner Ecosystem Is Still Rolling Out.
View all 19- The Company's Memory Must Be an Enterprise Record
Inference Is Rented. Institutional Knowledge Must Survive the Supplier.
- The Enterprise Agent Control Stack
Three Contested Control Points, One Final Decision, and the Records That Must Survive
View tag- Standardize `act` Across Assertion Grants and JWT Access Tokens
View tag- Continuity Is Not One Thing
The Four Questions of Delegated Work, and the Invariants That Compose Their Answers
- The Continuity Evaluation Kit
A Vocabulary, a Rubric, and a Living Map for the Four Questions
- Re-Subjecting Is a Mint, Not an Attenuation
View tag- Least Exposure Is Broader Than Least Privilege
Bounding What an Agent May See, Not Just What It May Do
- Trusting Issuers in Open-World OAuth
Identity Assertion Trust Framework and Domain-Authorized Issuer Trust Method
View tag- The Runtime Mints the Identity. That Does Not Make It the Authority.
The Agent Identity Market Will Be Decided at the Binding Layer
- Client Instances Are Actors, Not New Clients
View tag- The Identity Continuation Assertion
- Re-Subjecting Is a Mint, Not an Attenuation
- Enterprise SaaS Needs OAuth Federation Now
- ID-JAG Beyond the Enterprise IdP
View tag