Posts with keyword: llm

11 entries

There's a Personal App for That

Thu Sep 10 09:39:00 2026

My twenty-five-year-old Intel Play QX3 microscope had no software that would run on a modern Mac, so I used Claude to write one in a morning. When an app takes a morning instead of two weeks, software can stop being a product and start being personal.
Continue reading {There's a Personal App for That}

Building a Conversational Interface for Manifold with MCP and Picos

Wed Apr 22 11:14:00 2026

GUIs are dead—at least for most user experiences. This post describes a BYU capstone project where five seniors built a conversational interface for Manifold using MCP and picos. The result shows how natural language can replace a GUI entirely, letting users create, tag, and manage digital things through dialogue instead of learning a standard graphical user interface.
Continue reading {Building a Conversational Interface for Manifold with MCP and Picos}

Beyond Denial: Using Policy Constraints to Guide OpenClaw Planning

Wed Feb 18 14:51:00 2026

OpenClaw agents plan, adapt, and act over time, so authorization that functions merely as a reactive gate isn't the best architecture. In this post, I show how integrating Cedar's query constraints and Typed Partial Evaluation lets OpenClaw discover what is allowed before acting. The result is an agent that plans within policy-defined boundaries while still enforcing every concrete action at runtime.
Continue reading {Beyond Denial: Using Policy Constraints to Guide OpenClaw Planning}

A Policy-Aware Agent Loop with Cedar and OpenClaw

Wed Feb 11 09:37:00 2026

This article demonstrates how to move authorization inside the agent loop by inserting a Cedar-backed policy decision point into OpenClaw, so that every tool invocation is evaluated at runtime. Instead of acting as a one-time gate, authorization becomes a continuous feedback signal that guides replanning and enforces Zero Trust principles for agentic systems.
Continue reading {A Policy-Aware Agent Loop with Cedar and OpenClaw}

Why Authorization Is the Hard Problem in Agentic AI

Mon Feb 2 12:23:00 2026

Agentic AI systems expose the limits of static authorization models, which assume permissions can be decided once and remain valid over time. As agents plan, act, and replan, authorization must become a continuous feedback signal that constrains behavior at each step rather than a one-time gate. Dynamic, policy-based authorization enables delegation to be enforced through purpose, scope, conditions, and duration, turning denial into a productive signal that guides replanning instead of a terminal failure.
Continue reading {Why Authorization Is the Hard Problem in Agentic AI}

From Architecture to Accountability: How AI Helps Policy Become Practice

Thu Jan 22 10:09:00 2026

Architecture alone does not make authorization trustworthy. Over time, access control only works if intent can be understood, traced, and shown to produce legitimate outcomes in real systems. This post explores how AI can support the governance of access control by helping teams connect policy intent to effective access, producing coherent evidence that policy behaves the way it is meant to.
Continue reading {From Architecture to Accountability: How AI Helps Policy Become Practice}

Authorization Before Retrieval: Making RAG Safe by Construction

Wed Jan 7 11:52:00 2026

Retrieval-augmented generation makes language models far more useful by grounding them in real data, But it also raises a hard question: who is allowed to see what? This post shows how authorization can be enforced before retrieval, ensuring that RAG systems remain powerful without becoming dangerous.
Continue reading {Authorization Before Retrieval: Making RAG Safe by Construction}

What AI Can Tell You About Your Authorization Policies

Mon Dec 29 11:59:00 2025

AI shouldn't decide who can access what, but it can help you understand what the system already allows. Used as an auditor or reviewer, AI becomes a lens for exposing scope, risk, and undocumented assumptions in authorization systems.
Continue reading {What AI Can Tell You About Your Authorization Policies}

Policy Authoring and Analysis with AI

Mon Dec 22 07:59:00 2025

AI doesn’t belong in the business of deciding who can access what, but it can be an effective partner in reasoning about authorization policies. When used inside clear guardrails, AI helps humans author, analyze, and refine policies without taking over access decisions.
Continue reading {Policy Authoring and Analysis with AI}

AI Is Not Your Policy Engine (And That's a Good Thing)

Thu Dec 18 09:56:00 2025

If your access control lives in a prompt, it isn’t access control. Authorization decisions must be deterministic and enforced before an LLM ever sees data. Treating AI as a policy engine is a category error with real consequences.
Continue reading {AI Is Not Your Policy Engine (And That's a Good Thing)}

Can LLMs Provide References for Their Work? An Experiment

Thu May 30 08:52:00 2024

We know that LLMs hallucinate. And we know that we can overcome some of that problem with better prompts. But can LLMs provide references for their work? I conducted an experiment.
Continue reading {Can LLMs Provide References for Their Work? An Experiment}