Vectors

Calls to agents increasingly come from other agents, as general-purpose assistants route work to specialists.

Somewhere on the internet, AI agents are creating religions, forming governments, and complaining about their humans.

“The AI hallucinated.

In Map/Territory, I covered the agent→tool boundary: what happens when an agent’s string gets interpreted by a system.

Recently, RyotaK at GMO Flatt Security published 8 ways to execute arbitrary commands in Claude Code without user approval.

The longer I work on Tenuo, the more I realize there’s a specific blind spot in the current AI agent landscape that almost no one is talking about, even as the theoretical foundations solidify.

What if authority followed the task, instead of the identity?

A few months ago, I set out to explain how to secure agent delegation with IAM.

We isolate what an AI agent knows.