Series
Identity and access
Keep the owner and permissions visible when agents call tools or hand work to other agents.
3 articles
Reading list
In this series
- 01
· Identity & access · 7 min
Why service-account permissions don't fit agents
Cross-tenant reach is an identity-model problem. The fix is a different kind of credential, issued at run start and scoped to the work in front of the agent.
- 02
· Identity & access · 7 min
Sub-agent identity: inherit and narrow
The two rules that govern how a sub-agent's identity should be derived from its parent's, what a sub-agent claim looks like, and how audit reconciliation works across the run graph.
- 03
· Identity & access · 6 min
The lethal trifecta: where it actually lives
Untrusted inputs + private data access + outbound communication. The framing names the risk space correctly; the standard mitigation pattern picks the wrong layer.