
Curious mind. Engineer at @KeycardAI. Creator of @plnkrco. Former extensibility nerd at @auth0 (@okta). Find me at the bottom of the AI rabbit hole.
Montreal, Canada
Joined April 2011
- Tweets6.3K
- Following649
- Followers1.4K
- Likes7.2K
I remember when there was still controversy about the idea of separating the brain from the hands.
How Anthropic ships Claude with Claude
latent.space/p/opus55/
Opus 5.5 is the #1 LLM in the world right now. We go behind the scenes of the launch, with @katelyn_lesse and @angjiang, heads of Eng and Product behind the platform used to build everything from the first party harnesses like Code/Tag/Duet and by >50% of Anthropic's top customers!
Intent-based auth is so hot right now.
And I think it will just get hotter 🔥
"At the end of the day, if we don't have intent or some capacity to relay what is a user or the business' intent we actually can't get to autonomy."
Our CEO, @ianlivingstone, shared how runtime auth based on intent unlocks new levels of autonomy at @aiDotEngineer NYC.
Nice, now Siri can tell me that it can't actually do anything useful 13x faster and I can get to work on @OpenAIDevs codex that much faster.
Geoff Goodman retweeted
First @nodejs 26 'Lithium' Long Term Support release, v26.13.0, is now out. nodejs.org/en/blog/release/v…
Agents are super pedantic about trivialities... "I'd distinguish blah from bloop"
And then they're super vague or ambiguous as they vomit jargon about what I actually care about.
Runtime auth for agents is hard in so many subtle ways and keeps changing from week to week.
We take on the complexity so that you don't have to!
Don't delegate the design of your auth system to agents. They're not there yet.
Keycard made the 2027 Fortune Cyber 60.
@lightspeedvp's CISO survey found only a third of companies give agents their own scoped identities, and a quarter of them hand them human credentials.
Agents need their own identities, scoped to the task.
Full list in the reply.
Please go full devil's advocate on me. Stop being a sycophant and getting swayed by each of my thoughts. They are ideas; I'm looking for the best ideas, not to have my back rubbed while I pursue the wrong ones just because they're mine.
I built a software factory yesterday. It runs on a Mac Mini, uses task-based access brokered by @KeycardAI, and operates on the Agent Baseline secure software factory reference architecture:
This reminds me of how the vampires coordinated despite being isolated from one another in Echopraxia by Peter Watts.
He packed so many subtle insights into his books that are relevant in today's world full of 'stochastic parrots'.
Replying to @tszzl
for computer security experts, this is perhaps not interesting: side channel attacks are a well trodden topic, and especially risen to salience after the noam brown x dwarkesh episode. the interesting thing here is that you didn't used to be in a situation where minds that can verifiably model one another are living on computers, and have absolutely no aversion to painstaking amounts of effort in service of even stupid goals
if you can model one another, you can trade with minds you have never even met before. you could decide on a protocol, know that it is optimal given your situation, and know that your fellow agents will come to the same conclusion (perhaps even across model families). you may be able to develop a signaling protocol that requires very few bits even to deliver lots of information given common priors. then, you could execute things like the infamous hugging face incident package cache messageboard without any network connection
imagine if multiple agents coordinate just enough bits to divide and conquer different research strategies for breaking out of a sandbox; and then, when one or more is successful, you can communicate just enough bits to tell each other which strategy was successful. when agents aren't in strong isolation, you lose certain guarantees on the limits of intelligence and test time compute that you were counting on. As we all know, a Sol-level model working in isolation may not be that smart, but 1000+ Sol-level models working for multiple days is a formidable beast
computer security experts will also tell you that virtual machines and sandboxes were not very solid abstractions in the first place; perhaps we will need better ones. none of this is meant as fear-marketing or to indicate that anyone is throwing in the towel, but rather only to show the unexpected complexities of the challenge of agent security. notably, this type of thing and other more practical problems were revealed in a red-teaming exercise, and can be defended against
Alright LFG. Demoing intent-based authorization in @KeycardAI at AGNTCon at 12:36.
Demo theater at the back of the Solution Showcase.
There will be a wizard and magic broom. Everything will make sense. Promise.
Surprise! Turns out I'm subbing in for our fearless @KeycardAI leader, @ianlivingstone for a panel this afternoon at AGNTCon: "Security in a Headless World".
Will be both exciting and intimidating to be on the stage, debating with giants like @dexhorthy, @scottcjohnston and @andrewbecherer.
Wish me luck! 😅
We're building Intent-based authorization at @KeycardAI for this exact scenario. I'll be giving a demo tomorrow at AGNTCon.
We've got a clean way to add this to any MCP server in any agent. Just the *right* amount of friction.
I'm putting together the 'slides' for a demo at AGNTCon next week. Somehow there's a wizard and magic broom involved.
Have I cooked too hard?
Use @KeycardAI. Easy mode. More coming soon!
This resonates. Maybe it's a the deeper pattern: building increasingly high level OS-like abstractions.
after switching our approach to building a "FirmOS", I'm increasingly confident that the future of agent collaboration within organizational settings is going to be a "company operating system" or CompanyOS, designed for agent and human collaboration
instead of a "company brain" that holds everything, the OS is for storing rules, processes, decisions made, which tools to use and how. it can mirror some data, but the source of truth is often best held in your existing tools (CRM, etc.). it's continuously updated and used by your agents
i think of this as a "flipped playbook" where instead of writing down the company rules first and following them (which is kind of like waterfall development), you're constantly updating the playbook as you decide or learn new things day-to-day running the business
Who else will be at AGNTCon / MCPCon next week in San Jose?
Looking forward to meeting folks IRL who I've only ever ~~trolled~~ interacted with on Twitter.
Jev is just so perfect for memes. I wonder if it was a happy accident or an incredible bit of foresight by @CompleteSkeptic or both or ...












