We've been running AI agents at AuthZed that we actually trust. The platform behind them, Open Agent Primitives (OAP), is now open source.
We started where a lot of teams start: personal agents running with one person's credentials, hopefully scoped correctly, inside a sandbox
Keycloak on one side. GitHub OAuth on the other. One permission model across both.
Our new post shows how to federate authorization across multiple IdPs with SpiceDB.
New in the SpiceDB Playground: Explain.
Toggle it on and get AI-generated, plain-language annotations for every definition and relation in your schema. Compact or Full detail.
Handy when you're learning the schema language or untangling a big schema.
play.authzed.com
Someone pointed a load test at Zanzibar's production environment by mistake. 10 million extra QPS.
"We didn't notice." Nobody got paged. Nothing fell over.
Episode 6 of base-layer, with Ari Shamash, formerly of Google's Zanzibar team, is out now.