Reposted by Daniel Joseph
1/7 OAuth scopes get autonomous LLM agents 70% of the way to safe. The token says who is calling. It doesn't say what this specific run of who can do, signed and time-bounded. That gap is the whole problem with shipping autonomous agents to production.
brooksmcmillin.com/blog/wiring-...
brooksmcmillin.com
Wiring capability warrants into autonomous agents
Why OAuth scopes aren't enough for autonomous LLM agents calling MCP tools, and how we wired Tenuo capability warrants end-to-end. Scope-gated rollout, two real bugs, multi-hop delegation, and an atta...
