u/daniel_tenuo

SalesBleed felt like a pretty good example of why we’ve been pushing task-based permissions for agents.

The basic idea is to treat permissions more like a valet key: give the agent what it needs for the task it’s doing right now, not everything its role could ever need.

I’m one of the people building Tenuo, so obvious bias. Curious where people think this breaks down.

For context, Tenuo is Apache 2.0 open source, and our AAT IETF-Draft was recently cited by NIST in its work on agentic AI identity and authorization.