niyikiza
Joined 13 years ago
Karma
446
Submissions
226
Member since
Apr 23
Recent submissions
Comment · 1 month ago
Good point. Identity is not the same thing as authority. We're working on the authority piece at tenuo.ai (with a corresponding IETF protocol effort)
Comment · 1 month ago
We are working on Tenuo[1] which is basically macaroons for agents. It uses capability-based cryptographic "warrants" as an authorization mechanism for multi-hop delegation. Rust core. Apache2.0
Comment · 1 month ago
Tenuo guarantees the agent's actions stay within the defined boundaries but it doesn't influence what the agent "thinks" about or what it decides to do within those boundaries
Comment · 1 month ago
To be fair hardly anybody really knows what it means to be a regular member either.
Comment · 2 months ago
This. Especially when you have agents calling other agents. Just published an article about that yesterday: https://niyikiza.com/posts/agents-to-agents/
Comment · 3 months ago
We built an open source governance tool called Tenuo that allows you to define exactly what an agent can do for a given tasks. Works for local filesystem, network, mcp servers, etc.
Comment · 3 months ago
I'm working on a Claude Code governance tool that allows to define deterministic policies for tool call that can be enforced across a fleet and will be in effect even when individual users run with --dangerously-skip-permissions
Comment · 4 months ago
I guess they should include tuition cost as well.
Comment · 4 months ago
We've been using Tenuo which for task-scoped authorization.
Its integration for Claude Code: https://github.com/tenuo-ai/claude-governance
Building Tenuo (github.com/tenuo-ai/tenuo)
dev at tenuo.ai