Writing

oct Authentication is their problem. Authorization is yours: Federating permissions across multiple IdPsYour users sign in through a few different identity providers. Your permissions still need to know they're the same person. AuthZed may Build and Deploy a GitHub-Style Permission System in AuthZed CloudGitHub's permission model rebuilt in SpiceDB (orgs, teams, roles, per-repo access) and deployed to AuthZed Cloud. AuthZed apr Build a Production-Grade Agentic RAG System Using AuthZed CloudThe authorization check lives in the LangGraph pipeline itself, because asking the model nicely isn't a security control. AuthZed mar Introducing the LangChain SpiceDB Integrationlangchain-spicedb filters what your retriever returns, so people only see documents they're allowed to open. AuthZed feb Policy Engines Don't Work for AI AuthorizationCedar and other policy engines don't work for AI agent authorization. Here's why, and what to use instead. AuthZed jan Build Permission-Aware RAG with the SpiceDB TestcontainerTest your RAG pipeline's permission logic end to end, with SpiceDB running in a throwaway container. Docker jan Securing Knowledge Retrieval using SpiceDB and ReBACWhere should permission checks go in a RAG pipeline: before retrieval, after it, or both? Pinecone nov A Timeline of Model Context Protocol (MCP) Security BreachesAI changes the interface, but not the fundamentals of security. AuthZed mar Beware of the New Enemy ProblemRemove someone's access, then add a document. Get the order wrong and they can still read it. Dev.to jan Safeguarding Your Data When Using DeepSeek R1 in RAG PipelinesRunning DeepSeek R1 over your own documents? Make sure it only retrieves what the user is allowed to see. Dev.to jan Don't use JWT for Authorization!Why JWTs might not be your best friend for authorization, and the rare cases they make sense. Dev.to dec Deploy SpiceDB to Amazon ECSHow to deploy SpiceDB to ECS, and why you probably shouldn't in prod. AuthZed jun SpinKube & Flux on Kubernetes v1.30Hands-off deployments for WebAssembly apps on Kubernetes, using SpinKube and Flux. Fermyon mar Open Source and The CloudWhy the future of IT looks like open source running in the cloud. LinuxMagNL aug The Cloud Offers Freedom of ChoiceOn picking a cloud provider, and keeping the freedom to pick a different one later. BlogitNL jul Busting Common Myths about Lock-InSome popular myths about cloud lock-in, and how to keep your options open. EmerceNL dec What Does It Mean for Your Brand in a Voice-Centric WorldWhat happens to your brand when people stop typing and start talking to their devices. Economic Times aug The Science Behind Voice InterfacesWhat actually happens between you saying "Alexa" and Alexa answering. GadgetsNow jul Voice Interfaces Will Lower Barriers to TechnologyWhy talking to a computer might be the easiest way in for people who never got comfortable with keyboards. GadgetsNow 2024–onward AuthZed / SpiceDB DocumentationI contribute to the AuthZed and SpiceDB docs. AuthZed Docs 2023–2024 Fermyon Developer DocumentationI contributed to Fermyon's developer docs. Fermyon 2015–2017 Gupshup Developer DocumentationI contributed to Gupshup's developer docs. Gupshup