iiinova — where your digital self keeps evolving

authzed @authzed.com · 16/09/2026

How is Google Zanzibar so fast? I'll give you a hint: The Leopard indexing system If things like denormalization and set theory interest you, then watch this video on the genius design of Google Leopard 👉 youtu.be/Zb_Q7_ZZSjc

000

authzed @authzed.com · 06/08/2026

You can give time-bound access to your DevOps Agent, especially when it comes to access sensitive resources like your production server. It's actually super easy with ReBAC and SpiceDB. Check it out

000

authzed @authzed.com · 03/08/2026

How do you handle fine-grained permissions for a DevOps Agent? Here's an example that uses @aaif.io 's Goose with SpiceDB to ensure that access to prod is always secure. youtu.be/hJE3s1v929Y

000

authzed @authzed.com · 27/07/2026

The New Enemy problem was first described in the Google Zanzibar paper and might be the key to keeping your app data safe. If you're interested in permissions and security, you NEED to know about this. #security #authorization

010

authzed @authzed.com · 23/07/2026

Are app permissions important to you? Then you should know about the New Enemy problem, and how to prevent it. www.youtube.com/watch?v=Luoa...

000

authzed @authzed.com · 10/07/2026

Congrats to Adora Nwodo and Sohan Maheshwar from AuthZed on being named official ambassadors for @aaif.io, joining its inaugural cohort advancing open AI infrastructure 🎉 Read more: authzed.com/blog/authzed...

authzed.com

Agentic AI Foundation Names AuthZed's Adora Nwodo and Sohan Maheshwar as Ambassadors

Adora Nwodo and Sohan Maheshwar from AuthZed have been selected as official ambassadors for the Agentic AI Foundation (AAIF), joining the program's inaugural cohort.

000

authzed @authzed.com · 25/06/2026

Wondering what the fuss about Relationship Based Access Control is? Here's an explainer using....a MIDI Keyboard?! youtu.be/nPL3W_oHSrE?...

youtu.be

Explaining Relationship-Based Access Control (ReBAC) with my MIDI Keyboard

YouTube video by AuthZed

010

authzed @authzed.com · 10/06/2026

In 2024, Slack's AI assistant was found summarizing messages from private channels - including ones the user had never joined. This is the blind spot in most RAG pipelines, and could lead to data leaks. We just dropped a video covering three ways to fix it with SpiceDB youtu.be/OdnPmBvBj-8?...

youtu.be

Your RAG Application is Leaking Data. Here’s How to Fix It

YouTube video by AuthZed

020

authzed @authzed.com · 03/06/2026

We spoke at @amsterdam.voxxeddays.com about a topic that may be controversial: "Don't use JWTs for authorization" What do you think? youtu.be/ucTOgQTk6wk?...

youtu.be

Stop Using JSON Web Tokens (JWTs) for Authorization! by Sohan Maheshwar

YouTube video by Devoxx

122

Reposted by authzed

Jimmy Zelinskie @jimmy.zelinskie.com · 01/06/2026

authorization 👏 must 👏 be 👏 deterministic www.0xsid.com/blog/meta-ac...

0xsid.com

The Newest Instagram "Exploit" is the Goofiest I've Seen | Sid's Blog

043

authzed @authzed.com · 21/05/2026

What's your favorite thing to see in a PR and why isn't it this?

020

authzed @authzed.com · 20/05/2026

We're livestreaming how to bring fine-grained, relationship-based permissions into your LangChain apps with SpiceDB Stream starting in 4 minutes! www.youtube.com/live/xp1cELZ...

000

authzed @authzed.com · 07/05/2026

We updated our 'Timeline of Model Context Protocol (MCP) Breaches' post to include the latest security breaches form this year. Read more about why it happened, what data was exposed, and what they reveal about the new threat surface LLMs bring into organizations. authzed.com/blog/timelin...

000

authzed @authzed.com · 06/05/2026

SpiceDB has an experimental Query Planner for faster permission checks. To see how this works join our Office Hours livestream starting shortly www.youtube.com/live/uzS2GBG...

000

authzed @authzed.com · 22/04/2026

Our Open Source engineer Maria is on livestream talking about building zed, the official CLI for SpiceDB. We'll explore how zed is built, the design decisions that shape it, and how it powers developer workflows for SpiceDB users. Join here in four minutes: www.youtube.com/watch?v=yBEc...

010

authzed @authzed.com · 16/04/2026

Learn how to build a production-grade Agentic RAG system on AuthZed Cloud, where authorization is hardcoded into the LangGraph pipeline—not a prompt instruction the agent can skip. Check it out:

000

authzed @authzed.com · 13/04/2026

If you're using #Postgres and needed fine-grained permissions in your app - this foreign data wrapper for SpiceDB might just be the thing for you

000

authzed @authzed.com · 08/04/2026

Here's a new way to bring real-time authorization context from SpiceDB into Postgres queries, all without duplicating data, or rewriting policies. Check out this demo by AuthZed CTO and co-founder Joey Schorr of the SpiceDB Foreign Data Wrapper youtu.be/3C72jVHIqCg?...

000

authzed @authzed.com · 02/04/2026

The @langchain.bsky.social SpiceDB integration is now live! Adding fine-grain authorization in AI Agents or RAG is not a trivial task. This library simplifies the process and gives you a Retriever for RAG. It also has tool and a LangGraph node for AI Agents. docs.langchain.com/oss/python/i...

docs.langchain.com

SpiceDB integrations - Docs by LangChain

Integrate with SpiceDB using LangChain Python.

000

authzed @authzed.com · 19/03/2026

SpiceDB Community Day kicks off in few mins with Manuel from @docker.com talking about Testcontainers & RAG Also, Mark Fogle of @clawtocracy.ai will share how he built Agentic Permissions for OpenClaw Oh and you might hear a spicy update about SpiceDB too! www.youtube.com/watch?v=Upwy...

youtube.com

SpiceDB Community Day 2026 feat. Docker, Clawtocracy & more

YouTube video by AuthZed

001

authzed @authzed.com · 10/03/2026

Excited to announce the @langchain.bsky.social SpiceDB integration 🎉 This library brings SpiceDB's authorization model into LangChain & LangGraph workflows, so you can build Agentic and RAG workflows with fine-grained authorization that scales. Check it out: authzed.com/blog/langcha...

authzed.com

Introducing the LangChain SpiceDB Integration

We're announcing langchain-spicedb, a new library that brings SpiceDB's relationship-based access control into LangChain and LangGraph workflows. Build RAG pipelines that respect what users are allowe...

100

authzed @authzed.com · 05/03/2026

If we find permissions systems complex for humans, adding AI Agents to your organization will only compound the problem. Here are some falsehoods that people believe about AI Agent Authorization youtu.be/PTWrOCyCfaI?...

youtu.be

Falsehoods People Believe About AI Agent Authorization - Webinar w/ Jake Moshenko, AuthZed CEO

YouTube video by AuthZed

000

authzed @authzed.com · 26/02/2026

Model Context Protocol is does not secure by default. One of the big reasons is what @simonwillison.net calls the Lethal Trifecta. Watch this video to learn more about access control around MCP and how that caused some recent high-profile breaches www.youtube.com/watch?v=u0fU...

youtube.com

Model Context Protocol (MCP) is Not Secure!

YouTube video by AuthZed

000

authzed @authzed.com · 19/02/2026

Cedar is not a good fit for AI Agent Authorization. That's because policy engines don't easily have access to what we like to term 'ambient context. See this video to learn more about why policy engines are NOT suited for AI Authorization www.youtube.com/watch?v=9HvE...

youtube.com

Policy Engines Don't Work For AI Authorization. Here's Why:

YouTube video by AuthZed

021

Reposted by authzed

WebExpo Conference @webexpo.bsky.social · 18/02/2026

Building an AI agent is easy. Teaching it to keep a secret? 😅 At WebExpo, Sohan Maheshwar from @authzed.com scrutinises the leaks. 🤫 He architects permissions using the Google Zanzibar model to ensure your RAG system knows what to withhold. Live demo with Pinecone and SpiceDB.

webexpo.net

How to prevent AI Agents from accessing unauthorised data

May 27-29, 2026

001

authzed @authzed.com · 13/02/2026

Policy Engines are not a good fit for AI Agent authorization. Here's why that's the case, featuring an example that uses Cedar youtu.be/9HvE9Tm6Sss

youtu.be

Policy Engines Don't Work For AI Authorization. Here's Why:

YouTube video by AuthZed

000

authzed @authzed.com · 28/01/2026

AuthZed Serverless will be sunset on April 5th 2026. Here's a livestream on how to migrate to AuthZed Cloud or self-managed SpiceDB - starting in 5 minutes www.youtube.com/watch?v=xIZG...

youtube.com

Migrate from AuthZed Serverless to AuthZed Cloud

YouTube video by AuthZed

000

Reposted by authzed

Docker @docker.com · 25/01/2026

Your RAG pipeline works… until it shows a user data they shouldn’t see. Learn how to enforce permissions, safely post-filter RAG results, and test the whole flow end-to-end with Testcontainers, while using SpiceDB, the same system OpenAI uses to secure 37B docs for 5M users: bit.ly/3ZwdyaB

bit.ly

RAG Permission Testing with Testcontainers & SpiceDB | Docker

Learn how to validate permissions in RAG pipelines end to end using Testcontainers and SpiceDB - covering setup, test data, and policy checks developers can trust.

032

authzed @authzed.com · 22/01/2026

ICYMI here's the timestamped video of Jake's predictions for 2026. Includes insights about Agentic RAG, China, Postgres, and a whole lot more! www.youtube.com/live/AHlKWyT...

000

authzed @authzed.com · 21/01/2026

Stream starting in 4 minutes!

000

Reposted by authzed

Andy Pavlo @andypavlo.bsky.social · 05/01/2026

I've posted my latest recap of the world of databases: www.cs.cmu.edu/~pavlo/blog/... All the hot topics from the last year: • More Postgres action! • MCP for everyone! • MongoDB gets litigious with FerretDB! • File formats! • Market movements! • The richest person in the history of the world!

cs.cmu.edu

Databases in 2025: A Year in Review

The world tried to kill Andy off but he had to stay alive to to talk about what happened with databases in 2025.

17625

authzed @authzed.com · 20/01/2026

We're hosting a 'Authorization In 2026' livestream tomorrow, featuring CEO Jake Moshenko. We'll discuss the big events in the AuthZ space that defined 2025, and what 2026 has in store for us. It's Office Hours format so bring any questions you have. youtube.com/live/AHlKWyT...

000

Reposted by authzed

roxsross @roxsross.bsky.social · 19/01/2026

🔐 RAG Consciente de Permisos: Pruebas de Extremo a Extremo con SpiceDB Testcontainer Garantiza que tu IA solo devuelva lo que el usuario tiene permiso para ver. www.docker.com/blog/rag-permission-… #GenAI #Authorization #Testcontainers #Docker #RoxsRoss

011

Reposted by authzed

Matthias Knäpper @knaepp.bsky.social · 15/01/2026

Permission-Aware RAG: End-to-End Testing with the SpiceDB Testcontainer/#docker #container - We use GenAI in every facet of technology now – internal knowledge bases, customer support systems, and code review bots, to name just a few use cases.And in... tinyurl.com/2cmqyjyz

011

authzed @authzed.com · 15/01/2026

How do you know what a user is allowed to access in a RAG system? If you're building a RAG pipeline, it's important to think of access control. Here's a primer on building fine-grained authZ in a RAG using Pinecone as your vector database and the OpenAI LLM. www.pinecone.io/learn/rag-ac...

pinecone.io

RAG with Access Control | Pinecone

In this post, we’ll cover how SpiceDB works, how to model permissions, and how to apply access control both before and after retrieval in a RAG pipeline built with Pinecone and OpenAI embeddings.

000

authzed @authzed.com · 13/01/2026

AI can't secure AI. But you can use AI to build a deterministic authorization system. Check out this tutorial on how you can use AuthZed MCP Servers to build a Permissions System in under 10 Minutes. youtu.be/OYQTHk7ie0Y

youtu.be

AI-Assisted Authorization: From Zero to Permissions System in Under 10 Minutes

YouTube video by AuthZed

021

authzed @authzed.com · 26/11/2025

There's been so many high-profile data breaches in Model Context Protocol (MCP) this past year including WhatsApp, Anthropic, GitHub, Asana & more. Here's a timeline of breaches with a description of why it happened, & some patterns we're seeing across these incidents authzed.com/blog/timelin...

authzed.com

A Timeline of Model Context Protocol (MCP) Security Breaches

AI fundamentally changes the interface, but not the fundamentals of security. Here's a timeline of security breaches in MCP Servers from the recent past.

100

authzed @authzed.com · 19/11/2025

What does Stardew Valley have to do with Fine-Grained Authorization? Well, here's a post on building a RAG-enabled harvest logbook for your farm, inspired by Stardew Valley. To build out the backend for this demo we got help from our friends at Motia authzed.com/blog/buildin...

authzed.com

Download the Google Zanzibar white paper annotated by AuthZed and with a foreword by Kelsey Hightower.

000

Reposted by authzed

Jimmy Zelinskie @jimmy.zelinskie.com · 11/11/2025

@authzed.com is at #KubeCon! We'll be doing demos at the booth of our wonderful partner, Arm. Booth 231 across from the Corner Store in Peachtree Plaza!

091

authzed @authzed.com · 31/10/2025

Dibs is headed out to trick-or-treat as a Sandworm this year. Happy Halloween!

Illustration of Dibs, the authzed mascot, dressed as a sandworm from Dune. Dibs is holding a bucket for candy that looks like a skull and is located in a backdrop of bats, pumpkins, and the moon. Text reads "Happy Halloween! From authzed"

041

Reposted by authzed

Cloud Native Bergen @cloudnativebergen.dev · 28/10/2025

Sohan Maheshwar and Michel Murabito takes the stages at #cndb2025 talking about authorization with SpiceDB and AI driven developer experience (respectively) #CloudNativeBergen

052

authzed @authzed.com · 09/10/2025

Solving the dual-write problem is not a trivial task. Here's a deeply technical talk by Artie Shevchenko on how Canva solves the dual-write problem when using SpiceDB Watch it if terms such as "consistency, transactional outbox, & micro syncs" appeal to you 🤓 youtu.be/HAXQN1vNmeU

youtu.be

How Canva Solves the Dual Write Problem in Centralized Authorization Systems

YouTube video by AuthZed

020

authzed @authzed.com · 25/09/2025

Only few hours to go for the Pinecone 🤝 AuthZed webinar on 'Securing Your RAG Pipelines With Fine Grained Authorization' Learn the basics of how RAG works, authorization for RAG, & a demo with Pinecone, LangChain, OpenAI, and SpiceDB 👉 Last chance to register → pinecone-io.zoom.us/webinar/regi...

pinecone-io.zoom.us

Welcome! You are invited to join a webinar: Secure Your RAG Pipelines With Fine Grained Authorization using SpiceDB. After registering, you will receive a confirmation email about joining the webinar.

Building enterprise-ready AI systems requires ensuring users can only augment prompts with data they're authorized to access. Fine-grained authorization in Retrieval-Augmented Generation (RAG) can be ...

000

authzed @authzed.com · 12/09/2025

OpenAI built connectors to process and search 37 billion documents for over 5 million business, with fine-grained authorization. How did they achieve this and how can you build such scalable access control? Watch this video to learn: www.youtube.com/watch?v=QgB8...

youtube.com

How OpenAI Processes 37 Billion Documents with Fine-Grained Access Controls

YouTube video by AuthZed

030

Reposted by authzed

Jenna Pederson @jennanerdsout.com · 12/09/2025

🔑 Join Sohan Maheshwar from @authzed.com and me for a webinar as we talk about securing enterprise AI systems with relationship-based access control (ReBAC). We'll do a demo with Pinecone and SpiceDB and answer questions. 🗓 September 25 ⏰ 9 am PT / 12pm ET 🔗 pinecone-io.zoom.us/webinar/regi...

011

authzed @authzed.com · 08/09/2025

Revisit this blogpost on ReBAC by @jimmy.zelinskie.com ✨

010

authzed @authzed.com · 26/08/2025

We're keeping the Office Hours train rollin' here at AuthZed. This week we're speaking to Yogish and Sriharsha from @awscloud about building Access Control with SpiceDB and Amazon Neptune. Expect a lot of content about the AWS architecture for this usecase youtube.com/live/9pompmG...

youtube.com

Access Control with SpiceDB & Amazon Neptune

YouTube video by AuthZed

101

Reposted by authzed

verdverm @verdverm.com · 20/08/2025

Can we define the permission system for @atproto.com in less than 50 LOC and have it be easy to understand? This is an @authzed.com schema that could. (also, happy 5th birthday Authzed! 🎂🎂🎂🎂🎂) #atdev #atprotodev

Screenshot of an Authzed Schema for ATProtocol

https://github.com/blebbit/atproto/blob/main/packages/pds/src/authz/spicedb/schema/atproto.zed

041