Practical guidance on securing AI agents, tools, and the systems they act on, written by the team building the trust layer for AI agents.
Human-in-the-loop blocks an AI agent's action until a person approves it; human-on-the-loop lets the action proceed while a person watches and can intervene after.
Step-up authentication requires an extra verification step before an AI agent completes a high-impact action, even when the surrounding session is already authenticated.
Policy-based access control centralizes agent authorization rules in a dedicated engine, so decisions can be updated, tested, and audited without touching agent code.
Attribute-based access control evaluates an agent's permissions against live context, like data sensitivity or time of day, instead of a fixed role assigned in advance.
Role-based access control gives AI agents permission sets tied to predefined roles, which works well for stable, predictable tasks but strains under dynamic ones.
Scoping an agent's permissions means starting from the narrowest set of actions its task requires, then only widening access when a specific, justified need appears.
Delegated authorization lets an AI agent act on a user's behalf using that user's actual permissions, instead of the agent's own, broader service role.
Short-lived credentials cap how long a leaked or misused token stays useful, which matters more for agentic workflows than almost any other part of an AI stack.
A service account for an AI agent needs its own scoped role, credential lifecycle, and monitoring, separate from the human accounts and other agents around it.
Workload identity gives an AI agent a verifiable, non-human identity tied to its runtime environment rather than a long-lived secret it carries around.
User identity and agent identity answer different questions, who a request is for versus what software actually made the call, and both need to be tracked together.
An AI agent should generally have its own identity, distinct from the user it acts for, so its actions can be authorized, rate-limited, and audited independently.
