Uchi Uchibeke
Building rails and connections to unlock opportunities for everyone
Speaking next
- AGNTCon + MCPCon North America 2026
Recent writing
- I Forked ByteDance's DeerFlow at 3 AM to Add Pre-Execution Authorization
Eight minutes from noticing the missing authorization hook to opening PR #1240: 1,033 lines across 11 files that authorize every tool call before it runs.
- I Opened an AI Delegation Spec PR at 3 AM. Here's What It Solves.
PR #26 on the agent passport spec, opened at 3:04 AM on March 15: D-004 defines signed delegation tokens that must narrow scope at every hop, with depth limits and a traceable chain root.
- I Checked 14 AI Agent Frameworks for Authorization. None Had It.
Fourteen agent frameworks, one question: does a tool call pass through a policy check before it runs? Fourteen variations of no, and the attacks that exploit it.
- Your AI Agent Just Spent $3,000 and You Didn't Approve It
FIDO, Google, and Mastercard are standardizing who authorized an agent to pay. None of it constrains what the agent spends once a prompt injection lands.
- A Cursor Agent Deleted a Production Database in 9 Seconds. Here's Why Pre-Action Authorization Would Have Caught It.
A Cursor agent deleted PocketOS's production database and every backup in nine seconds. The same authorization gap runs through every agent incident of 2026.
- AWS Just Dropped Its Agent Authorization Playbook: Here's What Cedar Gets Right (And Wrong)
Bedrock AgentCore puts Cedar policies outside the agent's reasoning loop. That works for one hop. Multi-agent delegation chains are still unsolved.
- A payment request is not a policy decision: 4,371 human attacks, 14 models, one question
We replayed 4,371 human-written attacks against 14 models, with and without an authorization check between the tool call and the bank. The models kept asking to pay. What changed is whether the money moved. Charts, denominators and a reproduce command.
- Microsoft Shipped MCP Governance. Your Agent Needs One Too.
Microsoft's governance package scans MCP tool definitions at startup, enforces policy per call, and sanitizes responses. Every other MCP SDK has none of it.
Read the archive for 48 more.
