Posts with keyword: cedar

7 entries

Human in the Loop Control for OpenClaw

Thu Sep 24 14:42:00 2026

Some agent actions are too consequential to leave to policy alone. This post describes a new OpenClaw demo that uses Cedar and a Yubikey to put a human in the loop, binding each approval to the exact action being approved. Because the control lives in the harness rather than the prompt, the agent can't reason its way around it.
Continue reading {Human in the Loop Control for OpenClaw}

Authentication Is Largely Solved. Authorization Isn't.

Thu Sep 3 11:03:00 2026

My new book, Authorization in Action, is out from Manning. It's about the question that comes after we know who you are: what are you allowed to do, under what conditions, on whose behalf, and in what context? Authentication is largely a solved problem; authorization is not, and AI agents are about to make that gap impossible to ignore.
Continue reading {Authentication Is Largely Solved. Authorization Isn't.}

Delegation as Data: Applying Cedar Policies to OpenClaw Subagents

Mon Mar 2 13:43:00 2026

Intra-domain delegation enables an agent to grant constrained authority to subagents without expanding the system’s trust boundary. In the OpenClaw + Cedar demo, delegation is modeled as data and enforced by a stable policy set, preserving policy integrity while allowing dynamic scoping of power.
Continue reading {Delegation as Data: Applying Cedar Policies to OpenClaw Subagents}

Childproofing the Control Plane: Using Cedar to Build Frontal Lobes for Agentic Systems

Wed Feb 25 08:55:00 2026

Connecting an agent like OpenClaw to Home Assistant can make home automation more adaptive and intelligent, but it also introduces real risks if authority is not clearly bounded. By externalizing decision logic into deterministic Cedar policies, we can create governed autonomy that allows agents to act usefully while preventing them from crossing safety, security, and privacy boundaries.
Continue reading {Childproofing the Control Plane: Using Cedar to Build Frontal Lobes for Agentic Systems}

Beyond Denial: Using Policy Constraints to Guide OpenClaw Planning

Wed Feb 18 14:51:00 2026

OpenClaw agents plan, adapt, and act over time, so authorization that functions merely as a reactive gate isn't the best architecture. In this post, I show how integrating Cedar's query constraints and Typed Partial Evaluation lets OpenClaw discover what is allowed before acting. The result is an agent that plans within policy-defined boundaries while still enforcing every concrete action at runtime.
Continue reading {Beyond Denial: Using Policy Constraints to Guide OpenClaw Planning}

Early Access to Dynamic Authorization

Tue Sep 9 15:47:00 2025

The first six chapters of my new book, Dynamic Authorization: Adaptive Access Control, are now available in Manning’s Early Access Program. The book explores why authorization is still misunderstood, and how new tools like Cedar enable secure, flexible systems that also improve employee and customer experience.
Continue reading {Early Access to Dynamic Authorization }

Why Do Policy Languages Feel So Hard?

Tue Apr 15 11:41:00 2025

Policy languages can feel intimidating due to unfamiliar syntax, poor tooling, and the high stakes of getting access control wrong. But once understood, they simplify application logic and make security more reliable and maintainable.
Continue reading {Why Do Policy Languages Feel So Hard?}