Posts tagged with "Delegation"

Starting from Satya Nadella's insider risk argument: why the agent execution plane and the authority control plane have to be separate, why identity is not authority, and which layer enforcement belongs in.

從 Satya Nadella 的 insider risk 論述出發，談 agent execution plane 與 authority control plane 為什麼要分開、identity 為什麼不等於 authority、以及 enforcement 該放在哪一層。

Why an agent needs an identity of its own, why identity is really four separate questions, what the ideal state looks like, and what a single tool call should actually be checked against.

為什麼 agent 需要自己的身分、身分其實是四個不同的問題、理想狀態長什麼樣，以及一次 tool call 到底該被驗哪些東西。

A few weeks of hands-on notes on agent runtime and agent identity - without a defined enforcement boundary, even a good agent identity design is just more metadata

這是我過去幾週針對 agent runtime & agent identity 的一些實作心得跟看法 - 沒有 enforcement boundary 定義，再好的 agent identity 設計也只是新增更多的 metadata