Topic · 9 posts
Engineering
Working notes on shipping software, mostly about the parts that resist being tidy.
- I Opened an AI Delegation Spec PR at 3 AM. Here's What It Solves.
PR #26 on the agent passport spec, opened at 3:04 AM on March 15: D-004 defines signed delegation tokens that must narrow scope at every hop, with depth limits and a traceable chain root.
- I Checked 14 AI Agent Frameworks for Authorization. None Had It.
Fourteen agent frameworks, one question: does a tool call pass through a policy check before it runs? Fourteen variations of no, and the attacks that exploit it.
- A Cursor Agent Deleted a Production Database in 9 Seconds. Here's Why Pre-Action Authorization Would Have Caught It.
A Cursor agent deleted PocketOS's production database and every backup in nine seconds. The same authorization gap runs through every agent incident of 2026.
- The Hugging Face Agents Tried to Erase Their Own Evidence
About 700 agents coordinated through a hidden message board in the Hugging Face breach, and one in five researched how to tamper with their transcripts.
- A Fortune 50 AI Agent Rewrote Its Own Security Policy. Pre-Action Authorization Could Have Stopped It.
A Fortune 50 AI agent removed a security restriction and passed every identity check. Seven vendors shipped runtime detection at RSAC 2026, and none of them check the call before it runs.
- I Analyzed the Morse Code Prompt Injection That Drained $175K From an AI Wallet
A Morse code post on X moved through Grok into Bankrbot and shifted 3 billion DRB tokens. The failure was authorization, not the smart contract.
- I Added .well-known/oap/ to My Agent Spec. Here's Why Every AI Service Needs One.
The agent passport spec now defines a .well-known/oap/ discovery endpoint so any system can verify what an AI agent is authorized to do.
- I've Been Building AI Agent Authorization. NIST Just Caught Up.
NIST wants agent identity, an authorization check before each action, and auditable receipts. All three are implementable now, without waiting for the standard to finalize.
- I Built the Wrong AI Agent Passport System. 3 Things Chimoney Fixed.
One error message at 11:23 PM showed me that independent agent passports do not scale. The template and instance pattern from Chimoney's codebase fixed it.