feat(copy): 2.4.0 features, and fix the agent-safety claim - #22
Merged
Conversation
Landing copy stopped at RBAC/FGA and still described MFA as email-OTP only, omitting the enterprise surface shipped since: passkeys, SAML/OIDC SSO, organizations, SCIM, M2M and RFC 8693 delegation. - add six feature cards for the above - correct the MFA card and the SDK list (Vue and Svelte ship; drop the Flutter "coming soon", the repo has no code) - widen the meta/OG descriptions to the same set
✅ Deploy Preview for authorizer-dev ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
The prompt-injection card described the pre-2.4.0 behaviour as the safety property — "it asks as the user, and gets the user's answer" is the Confused Deputy, not protection from it. An agent now gets what it AND the user are allowed. The delegation feature card stopped at the actor chain, which every RFC 8693 implementation has. Per-agent permissions are the differentiator.
lakhansamani
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Landing page copy for 2.4.0, alongside authorizerdev/authorizer#742.
Correction: the prompt-injection card described the bug as the feature
It read:
That is the Confused Deputy, presented as the safety property. It was written
before the intersection existed. An agent now gets what it and the user are
allowed — so a hijacked agent cannot reach further than it was trusted with, however
it is prompted.
Delegation feature card
Stopped at "verifiable actor chain", which every RFC 8693 implementation has.
Per-agent permissions are the differentiator, so the card now says so.
Also
2.4.0 feature coverage across the landing page (the original scope of this branch).
Verified:
npm run buildclean.