#capability-security#authorization#biscuit#naming#designation
What led me to capability security
How a naming problem in a simple webapp led to embracing capability security as the foundation for Hessra.
by Jacob Valentic
READ MORE
BLOG POSTS
Technical insights, updates, and deep dives into authorization
#machine-identity#non-human-identity#security#authorization
The Missing Foundation of Non-Human Identity
A foundational model for machine identity based on three dimensions: identity origin, initial policy state, and continuity.
by Jacob Valentic
READ MORE#cli#devtools#ux#dx#hessra-cli
Designing a CLI That Doesn't Get in Your Way
Design principles for building command-line tools that minimize friction through smart defaults, persistent config, and dual usage modes for humans and automation.
by Jacob Valentic
READ MORE#identity-tokens#api-keys#bearer-tokens#security#authentication#saas
How to Implement API Keys Using Hessra Identity Tokens
Replace static API keys with cryptographically secure, auto-expiring identity tokens that provide a seamless upgrade path to full authorization.
by Jacob Valentic
READ MORE#identity-tokens#ai-agents#delegation#biscuit#machine-identity#authorization#non-human-identity
Using Hessra Identity Tokens for Delegated Agent Identities
Learn how to use Hessra's identity tokens to create secure, hierarchical identities for AI agents and sub-agents with cryptographic delegation.
by Jacob Valentic
READ MORE#machine-identity#authorization#biscuit#zero-trust#ambient-authority#jwt#delegation
Your Contractor Has the CEO's Keycard: The Broken State of Machine Identity
How traditional tokens create ambient authority problems and why separating identity from authorization is the key to secure machine-to-machine communication.
by Jacob Valentic
READ MORE#zero-trust#security#network#sase#mesh#zanzibar#authorization
High level approaches to Zero Trust
Exploring three conceptual approaches to implementing Zero Trust: simulated solutions, shrinking perimeters, and request-scoped security.
by Jacob Valentic
READ MORE#security#zero-trust#network#infrastructure#nat
Your network was never safe
The internet broke your network the moment you connected it. Zero Trust is the overdue fix.
by Jacob Valentic
READ MORE#authorization#security#biscuit#rust
Introducing Hessra: Authorization Built for Machines
Authorization built for machines with offline-verifiable tokens and deep stack coverage.
by Jacob Valentic
READ MORE