robey@agentsandultras:~$
Building with agents.Writing about what breaks.
Agentic software development, LLMs, and the unglamorous parts nobody puts in the demo. Opinions are mine, and occasionally spicy.
↓ latest transmissions// latest transmissions 5
The Agent Authorization Standard We Already Had
Using OAuth Token Exchange (RFC 8693) and actor claims to control and audit agent delegation.
18 Times the Cost, the Same Backlog: Why AI Model Rightsizing Matters
And whether open-weight models are ready to do more of the heavy lifting.
A JWT Is Not Authorization
Header, claims, signature, and the small details that matter when agents start carrying tokens.
The Task Travels. The Token Should Not.
Following one development task across a personal assistant, coding agent, chat MCP, and production deployment without forwarding the original token.
Who Is Actually Acting?
Understanding act, may_act, and the identities hidden inside an agent request.