Posts

Technical essays on agent authorization, least-privilege, and the execution graph of AWS.

August 2026

The MCP spec hardened the handshake and left the invocation unguarded

The 2026-07-28 MCP revision fixed authorization everywhere except the boundary where an agent actually acts: the individual tool call. The gap, its architectural shape, and a working implementation.