This post first appeared on Addy Osmani’s Elevate Substack newsletter and is being republished here with the author’s permission.TL;DR: Aim for a clear
From Architecture to Accountability: How AI Helps Policy Become Practice
Architecture alone does not make authorization trustworthy. Over time, access control only works if intent can be understood, traced, and shown to produce legitimate outcomes in real systems. This post explores how AI can support the governance of access control by helping teams connect policy intent to effective access, producing coherent evidence that policy behaves the way it is meant to.
Why Authorization Becomes the Hard Problem in Agentic AI
Agentic AI systems expose the limits of static authorization models, which assume permissions can be decided once and remain valid over time. As agents plan, act, and replan, authorization must become a continuous feedback signal that constrains behavior at each step rather than a one-time gate. Dynamic, policy-based authorization enables delegation to be enforced through purpose, scope, conditions, and duration, turning denial into a productive signal that guides replanning instead of a terminal failure.
Client-side certificates were technically sound in the 1990s, but they failed because individuals weren't willing to pay for identity proofing. SEDI fixes that economic flaw by providing a state-endorsed, high-assurance digital identity to anyone who wants one, creating a durable foundation for secure online transactions and future digital credentials.
This article demonstrates how to move authorization inside the agent loop by inserting a Cedar-backed policy decision point into OpenClaw, so that every tool invocation is evaluated at runtime. Instead of acting as a one-time gate, authorization becomes a continuous feedback signal that guides replanning and enforces Zero Trust principles for agentic systems.
Beyond Denial: Using Policy Constraints to Guide OpenClaw Planning
OpenClaw agents plan, adapt, and act over time, so authorization that functions merely as a reactive gate isn't the best architecture. In this post, I show how integrating Cedar's query constraints and Typed Partial Evaluation lets OpenClaw discover what is allowed before acting. The result is an agent that plans within policy-defined boundaries while still enforcing every concrete action at runtime.
This book debunks the myth of the State as a large bureaucratic organization that can at best facilitate the creative innovation which happens in the dynamic private sector. It argues that in the history of modern capitalism the State has not only fixed market failures but also shaped and created markets, actively investing in new technologies and sectors that private investors only later find…
In 2002, I wrote this dissertation as part of my B.Sc. at UEA. I've kept this edition as close to the original as possible. I've added in links (where they still survive) and inserted a few comments where I was ludicrously wrong or unexpectedly right. This paper is not especially well-written and, if memory serves, received only a adequate mark. Terence Eden - 2016 Executive Summary This…
Twenty five years ago today, the EU's IST advisory group published a paper about the future of "Ambient Intelligence". Way before the world got distracted with cryptoscams and AI slop, we genuinely thought that computers would be so pervasive and well-integrated that the dream of "Ubiquitous Computing" would become a reality. The ISTAG published an optimistic paper called "Scenarios for ambient…
Hi, I am on my way to becoming a better engineer. So I am building stuff that people don't build and learn outside their job. I am currently learning about operating systems and how they work. But instead of following the old textbook reading approach, I am doing this by
Conductors to Orchestrators: The Future of Agentic Coding
This post first appeared on Addy Osmani’s Elevate Substack newsletter and is being republished here with the author’s permission.AI coding assistants have
Robby Russel - Most developers dont build new things | bjorn.now
Most developers don’t build new things by Robby Russell:
We inherit. We understand. We stabilize. We extend. We improve what we can without destabilizing what already works.
This kind of work rarely attracts attention. It looks like incremental improvement and steady compounding over time.
But if most of your career is going to be spent in the second act, then the real question isn’t whether you get to start something new.
I didn’t ask for this and neither did you. I didn’t ask for a robot to consume every blog post and piece of code I ever wrote and parrot it back so that some hack could make money off o…
Metaari's New Global Game-based Learning Report Available at Serious Play
/PRNewswire-PRWeb/ -- According to the new Metaari report "The 2019-2024 Global Game-based Learning Market", the worldwide five-year compound annual growth...