Identity for the Pico Engine
Version 1.5 of the Pico Engine finally brings identity into the engine itself: passkeys for humans, and OAuth for external apps and webhooks. Here's the shape of the design, why identity is really three problems and not one, and why I shipped the human and third-party layers before the pico-to-pico layer.
Continue reading...
The Shape of Context in Agentic Authorization
In agentic systems, the principal, action, and resource are often unknown until the moment an agent acts, and the context that governs the decision arrives as a flood of signals from many sources. This post looks at how that context takes shape, where each signal is actually consumed, and why a non-directed world of agents still needs decisions that humans can inspect and predict.
Continue reading...




