Authorization

Agents Are Where Microservices Were in 2015 — Roberto Milev & Uday Kanagala, Navan

Agents Are Where Microservices Were in 2015 — Roberto Milev & Uday Kanagala, Navan

Roberto Milev and Uday Kanagala from Navan discuss the challenges and emerging best practices in building and operating AI agents, drawing parallels with microservices. They highlight the shift to stateful runtimes, innovative memory and context management using 'skills,' and crucial solutions for observability and testing non-deterministic systems. A central theme is the critical need for robust authorization and guardrails, given the blurring line of agentic action, and a preference for mastering single-agent loops before scaling to complex orchestrations. They conclude by outlining the solved and unsolved problems, with cost and debugging remaining significant hurdles.

Better Agent Auth — Bereket Habtemeskel & Paola Estefania, Better Auth

Better Agent Auth — Bereket Habtemeskel & Paola Estefania, Better Auth

The Agent Auth protocol introduces a novel approach to securing AI agents by treating them as distinct principals with their own identities, moving away from sharing user credentials. It defines a system for agent discovery, fine-grained capability-based authorization, and comprehensive traceability, enabling users to grant specific authority to agents and revoke it granularly. This paradigm shift offers enhanced security, accountability, and control over autonomous operations.

You Didn't Ship a Bug. You Just Wrote It for a Human. - Ravi Madabhushi, Scalekit

You Didn't Ship a Bug. You Just Wrote It for a Human. - Ravi Madabhushi, Scalekit

Ravi Madabhushi details how existing infrastructure, designed for human users, fails AI agents, leading to issues like rate limits and over-permissioning. He argues for treating agents as first-class principals with fine-grained, context-aware authorization and robust visibility to prevent non-deterministic and potentially rogue behaviors.