Hacker GitHub

← All repos

tenuo-ai/tenuo

View on GitHub ↗ ★ 104 Rust

Task-scoped authorization for AI agents. Cryptographic warrants constrain tools and arguments, prevent privilege escalation at every delegation hop, and produce signed evidence of what was allowed or denied.

13 mentions on Hacker News by 3 people: 2 stories, 11 comments · first 2025-12-28 · latest 2026-10-14

Mentions per year 13 mentions · busiest year 2026 (12)
20082026
AllStoriesComments NewestTopOldest
  1. ▲ 4
    Show HN: OWASP Finbot Defended with Tenuo
    story by daniel_tenuo · 2026-10-14 · 2 comments
  2. …"warrants" as an authorization mechanism for multi-hop delegation. Rust core. Apache2.0 [1] https://github.com/tenuo-ai/tenuo
    comment by niyikiza · 2026-10-02 · in Identity Management for Agentic AI [pdf] (2025)
  3. …community. Eg; https://datatracker.ietf.org/doc/draft-niyikiza-oauth-attenu... (implementation: https://github.com/tenuo-ai/tenuo )
    comment by luka2233 · 2026-10-02 · in Identity Management for Agentic AI [pdf] (2025)
  4. Building tenuo.ai ( https://github.com/tenuo-ai/tenuo ): task-scoped authorization for AI agents. Rust implementation of capabilities + cryptographic offline verification.
    comment by niyikiza · 2026-05-10 · in Ask HN: What are you working on? (May 2026)
  5. We've been working on that with tenuo: https://github.com/tenuo-ai/tenuo Task-scoped "warrants", attenuating with delegation, and enforced cryptographically at tool call. Macaroons/Biscuits for agents basically.
    comment by niyikiza · 2026-03-17 · in Run NanoClaw in Docker Sandboxes
  6. …at the MCP tool boundary. Even a fully compromised agent can't reach outside its warrant. Open source. github.com/tenuo-ai/tenuo
    comment by niyikiza · 2026-03-15 · in MCP is dead; long live MCP
  7. …the task, delegation-aware, verified at the MCP tool boundary before execution. Open source core. https://github.com/tenuo-ai/tenuo
    comment by niyikiza · 2026-03-15 · in MCP is dead; long live MCP
  8. …level: what was this agent allowed to do, for which task, signed by whom. The core is open-sourced: https://github.com/tenuo-ai/tenuo
    comment by niyikiza · 2026-03-09 · in Agent Safehouse – macOS-native sandboxing for local agents
  9. …through delegation, cryptographically enforced, offline verification. MIT/Apache2.0, Rust Core. https://github.com/tenuo-ai/tenuo
    comment by niyikiza · 2026-02-19 · in OpenClaw is dangerous
  10. ▲ 2
    Show HN: Tenuo – Capability-Based Authorization (Macaroons for AI Agents)
    story by niyikiza · 2026-02-03 · 0 comments
  11. Working on this problem: https://github.com/tenuo-ai/tenuo Different angle than policy-as-YAML. We use cryptographic capability tokens (warrants) that travel with the request. The human signs a scoped, time-bound authorization. The tool…
    comment by niyikiza · 2026-01-30 · in Ask HN: How are you handling non-probabilistic security for LLM agents?
  12. …boundary (verifying at tool call time)? I've been mostly on the delegation side. Working on this at github.com/tenuo-ai/tenuo. Would love to compare approaches. Email in profile?
    comment by niyikiza · 2026-01-14 · in Claude Cowork exfiltrates files
  13. …see more tools move away from 'prompt engineering security' toward actual runtime guarantees. Repo: https://github.com/tenuo-ai/tenuo
    comment by niyikiza · 2025-12-28 · in How do you secure AI coding agents?