Ze'ev Manilovich

An AI agent with delegated access is a textbook confused deputy: it holds real authority and can be talked into using it for someone else. Here is how it happens over MCP and the delegated access pattern that stops it.

Auth0 FGA provides managed relationship-based authorization built on OpenFGA. A comparison with Permit.io covering policy languages, deployment models, and enterprise features.

WorkOS FGA extends RBAC with hierarchical resource scoping. A comparison with Permit.io covering policy languages, deployment models, and when each fits your authorization requirements.

EN 18286:2026 is Europe's first harmonised standard under the EU AI Act. It turns Article 17's QMS requirements into auditable processes. Here's what it means for teams shipping AI agents.

Oso Cloud acquired by Tiny (announced Oct 6, 2026), most of the team joined Temporal. A practical guide to Oso alternatives, mapping Polar to RBAC, ReBAC and ABAC, and migration planning.