A developer built a demo where an AI agent calls a model without any certificate files, using SPIFFE and SPIRE to issue identities at runtime. The gateway's authorization policy is based on SPIFFE IDs…
Saviynt Inc. Senior Practice Director Tuhin Banerjee argues that role-based access control (RBAC) is failing to govern autonomous AI agents, citing a 2026 industry survey where 59% of organizations ad…
A developer has published the final part of a series on trusted AI agent transactions, demonstrating an end-to-end proof that integrates PingFederate, SPIRE, and PingAuthorize to secure agent actions.…
A developer integrated PingAuthorize as a remote policy decision point at the MCP gateway for AI agent transactions, enforcing strict authorization checks beyond identity verification. The gateway con…
A developer detailed the use of SPIRE workload identity in trusted AI agent transactions, explaining how SPIFFE IDs provide cryptographically attested runtime identities distinct from logical agent po…
Tokenetes has implemented a Transaction Token Service (TTS) using PingFederate's RFC 8693 token exchange protocol to securely bind user, agent, and workload identities in AI agent transactions. The de…
Keycloak 26.7, released this month, adds production-ready OAuth 2.1 authorization for AI agents using the Model Context Protocol, enabling per-tool scopes and eliminating the default all-or-nothing ac…
Red Hat Senior Principal Product Security Engineer Garth Mollett discussed AI supply chain security on Software Engineering Radio, detailing how it differs from conventional software supply chains and…
Kubernetes network policies based on IP addresses become insecure when pods are rescheduled, as IPs change. SPIFFE and SPIRE provide cryptographic workload identities, and Cilium enforces mutual TLS u…
Tigera announced the general availability of Lynx, a unified control plane for Kubernetes-native AI agents. Lynx provides enterprises with a single platform to discover, secure, and audit AI agents ac…
Lynx, a Kubernetes-native control and data plane for agentic AI traffic, launched this week. It provides a registry, gateway, audit, authentication, policy enforcement, and agent sandboxing without re…
Uber and Auth0 are rethinking access control for AI agents, moving beyond traditional user or service-account models. Uber's architecture propagates agent identity and provenance across multi-agent wo…
AI code scanners become trustworthy only when fed explicit threat models, according to a cross-domain analysis of autonomous systems. Production agents require distributed-systems rigor including idem…