Comments
Hacker News
Author here. Built this solo. With having AI write boilerplate/tests/docs.
The parts I'd most want scrutiny on, these claims of mine:
1) mTLS 4-tier architecture over a token-based scheme : instead of copy-pasting a token into every agent's config by hand, each agent requests its own enrollment and gets approval, and what it holds afterward can't be copy-pasted and replayed the way a bearer token can.
2) for policy engine i used OPA/Rego, so it's a well-known language and easier to write complex policies.
by not-duckie
Join the discussion
Write your take first — we'll ask for email only when you're ready to publish.
- Hacker News
- Author here. Built this solo. With having AI write boilerplate/tests/docs. The parts I'd most want scrutiny on, these claims of mine: 1) mTLS 4-tier architecture over a token-based scheme : instead of copy-pasting a token into every agent's config by hand, each agent requests its own enrollment and gets approval, and what it holds afterward can't be copy-pasted and replayed the way a bearer token can. 2) for policy engine i used OPA/Rego, so it's a well-known language and easier to write complex policies.by not-duckie