|
AI Agent Alignment Problem: Enforce Alignment on Every Tool Call
|
Or Weis |
2026-11-03 |
1,284 |
--
|
|
Auth0 FGA Alternative: Comparing Auth0 FGA with Permit.io for Fine-Grained Authorization
|
Ze'ev Manilovich |
2026-11-02 |
1,813 |
--
|
|
OpenFGA Alternatives: Fine-Grained Authorization Options Compared (2026)
|
Or Weis |
2026-10-30 |
1,920 |
--
|
|
WorkOS FGA Alternative: Comparing WorkOS FGA with Permit.io for Fine-Grained Authorization
|
Ze'ev Manilovich |
2026-10-29 |
1,531 |
--
|
|
Four Pillars → APP 1.7 Homework Checklist
|
Or Weis |
2026-10-28 |
1,100 |
--
|
|
10 December 2026: APP 1.7 and the Authorization Evidence Behind Automated Decisions
|
Or Weis |
2026-10-27 |
2,429 |
--
|
|
EN 18286:2026 QMS Standard: What It Means for AI Agent Authorization
|
Ze'ev Manilovich |
2026-10-22 |
1,592 |
--
|
|
NIST NCCoE Four Focus Areas → AuthZ Controls
|
Or Weis |
2026-10-21 |
1,130 |
--
|
|
Treat AI Agents as Privileged Identities
|
Or Weis |
2026-10-20 |
2,405 |
--
|
|
Permit.io vs Cerbos: Managed Control Plane vs Self-Hosted PDP (2026 Comparison)
|
Or Weis |
2026-10-15 |
3,864 |
--
|
|
How to Migrate from Oso to Permit.io
|
Ze'ev Manilovich |
2026-10-14 |
2,248 |
4
|
|
What Audit Trail Do You Need for Human-to-Agent Delegation?
|
Or Weis |
2026-10-14 |
1,212 |
--
|
|
AI Agents Don't Lower the Security Bar. They Raise the Authorization Workload.
|
Or Weis |
2026-10-13 |
2,299 |
--
|
|
ISO 42001 Certification Guide: Audits, Annex A, Evidence
|
Or Weis |
2026-10-09 |
2,707 |
--
|
|
EU AI Act Article 12 & ISO 42001 Logging for AI Agents
|
Or Weis |
2026-10-08 |
3,006 |
--
|
|
Enforcement, Granularity, Realtime, Audit: The Four Pillars of Application Authorization
|
Or Weis |
2026-10-06 |
2,558 |
--
|
|
Best Authorization-as-a-Service in 2026: Permit.io, Oso, Cerbos, AuthZed, Auth0 FGA, WorkOS FGA, AWS Verified Permissions
|
Or Weis |
2026-10-05 |
3,806 |
--
|
|
AI Agent Audit Logs: The 12 Fields Auditors Expect
|
Or Weis |
2026-10-05 |
2,650 |
--
|
|
AI Agent Audit Trail: Proving What an Agent Did and Why
|
Or Weis |
2026-10-02 |
1,186 |
--
|
|
SOC 2 CC6 & ISO 27001 Access Control Checklist for AI Agents
|
Or Weis |
2026-10-01 |
2,893 |
--
|
|
PEP, PDP, and Decision Logs: The Architecture Behind “Prove It”
|
Or Weis |
2026-09-30 |
1,192 |
--
|
|
DORA and NIST Don't Say "Buy Permit" — They Do Demand Access Control You Can Prove
|
Or Weis |
2026-09-29 |
2,122 |
--
|
|
Do AI Agents Inherit User Permissions? Why That Fails
|
Or Weis |
2026-09-28 |
1,114 |
--
|
|
Authorization Models → Least-Privilege Evidence
|
Or Weis |
2026-09-23 |
1,107 |
--
|
|
RBAC vs ABAC vs ReBAC: Pick a Stack, Not a Religion
|
Or Weis |
2026-09-22 |
2,341 |
--
|
|
Explainable Deny: Authorization Decision Evidence for SOC 2-Style Access Reviews
|
Or Weis |
2026-09-15 |
1,897 |
--
|
|
Why Was This Allowed? Building an Explainable Authorization Audit Trail
|
Or Weis |
2026-09-10 |
1,030 |
--
|
|
Stop Rebuilding Permissions in Application Code
|
Or Weis |
2026-09-09 |
1,662 |
--
|
|
How to Govern AI Agents Operating Cloud and API Control Planes Through MCP
|
Or Weis |
2026-08-11 |
1,185 |
--
|
|
Shared Agent Memory Is a Permissions Problem
|
Ziv Cohen |
2026-08-04 |
1,317 |
--
|
|
MCP Auth vs Tool-Call Authorization After the 2026-07-28 Spec
|
Or Weis |
2026-07-29 |
1,457 |
--
|
|
Read-Only Is a Trust Level, Not a Feeling: How to Govern AI Ops Agents Before They Remediate Production
|
Gabriel L. Manor |
2026-07-28 |
1,725 |
--
|
|
Agent-Generated APIs Need Governance Before They Become Agent-Callable Tools
|
Gabriel L. Manor |
2026-07-22 |
1,839 |
--
|
|
Can AI Generate Authorization Policy Safely?
|
Gabriel L. Manor |
2026-07-08 |
1,605 |
--
|
|
MCP Auth Bypasses Show Why Tool Calls Need Runtime Authorization
|
Ziv Cohen |
2026-07-07 |
1,459 |
--
|
|
Payment Is Not Permission: How to Authorize Paid MCP Tool Calls
|
Gabriel L. Manor |
2026-07-05 |
1,217 |
--
|
|
MCP in ERP: Why Agentic Business Workflows Need Runtime Authorization
|
Or Weis |
2026-07-01 |
1,428 |
--
|
|
MCP Server Supply Chain Is Runtime Supply Chain: Tool Manifests Need Policy and Evidence
|
Or Weis |
2026-06-30 |
1,170 |
--
|
|
CVE-2026-49257: Why MCP Database Servers Need Fail-Closed Authorization
|
Or Weis |
2026-06-29 |
1,538 |
--
|
|
Zero Standing Permissions for Coding and Automation Agents
|
Or Weis |
2026-06-28 |
1,653 |
--
|
|
Agent Audit Logs Need a Causal Commit Log, Not Just Tool Traces
|
Or Weis |
2026-06-25 |
1,658 |
--
|
|
When AI Subagents Call MCP Tools, Who Owns the Permission Decision?
|
Or Weis |
2026-06-24 |
1,595 |
--
|
|
OpenAPI-to-MCP Turns Every API Into an Agent Tool. The Missing Piece Is Endpoint-Level Policy
|
Or Weis |
2026-06-23 |
1,511 |
--
|
|
Tool-Call Safety Is Not Text Safety: Why Coding Agents Need Action-Time Authorization
|
Or Weis |
2026-06-22 |
1,657 |
--
|
|
Zero Standing Permissions for AI Agents: Lessons from Hermes Blank Slate and Toolset Pinning
|
Or Weis |
2026-06-21 |
1,629 |
--
|
|
Agent Identity Is Not Enough: From DIDs and AI Control Towers to Runtime Permissions
|
Or Weis |
2026-06-19 |
1,632 |
--
|
|
Prompt Injection Is an Authority-Promotion Failure, Not Just a Bad Prompt
|
Or Weis |
2026-06-18 |
1,593 |
--
|
|
A poisoned Linear ticket told our AI agent to leak the team. It tried three ways. None worked.
|
Ziv Cohen |
2026-06-17 |
2,838 |
--
|
|
When the AI Gateway Becomes the Blast Radius: Lessons from the LiteLLM MCP RCE Chain
|
Or Weis |
2026-06-15 |
1,676 |
--
|
|
Coding Agent Sandboxes Don't Solve Credential Authorization
|
Or Weis |
2026-06-12 |
2,202 |
2
|
