Episode 210 - GluuFederation/identerati-office-hours GitHub Wiki
Title: Attenuating Agentic Delegation Tokens
- Host: Mike Schwartz, Founder/CEO Gluu
- Guest: Aimable Niyikiza, Security Engineering @Snap
Channels
Description
AI agents increasingly delegate work across chains of agents and tools—but today’s OAuth tokens often carry more authority than each step actually needs. This episode explores Attenuating Authorization Tokens, a proposed OAuth credential that lets agents derive progressively narrower, task-scoped permissions while preserving a cryptographically verifiable delegation chain. We’ll examine how offline attenuation, tool-level constraints, and proof of possession could reduce prompt-injection and confused-deputy risks without requiring the authorization server at every delegation hop.
Homework
Takeaways
- ⚡
- ⚡
- ⚡
- ⚡