Where Should Authorization Decisions Live in the Agent Stack?
Nice-Foundation-9264 · reddit · 2026-07-18
The author discusses which layer of the agent stack should handle "allow/deny" decisions: the planner, tool layer, orchestration layer, or a policy layer like IAM/OPA/Cedar.
The core question raised is: after an agent executes an action in a production environment, can you accurately reconstruct the decision context three months later—including the active policies, inputs, and rules at the time—rather than just viewing logs and audit trails?
To solve this, the author is developing a solution called Traxes. It places decisions before execution, checking actions against versioned policies and logging the reasoning behind every yes/no, aiming to allow a "replay" of the true authorization decision months later.
They are also asking the community for validation: is this a genuine gap, or are they overlooking existing tools?
Related event: Approval and Audit Debates for Production AI Agents(6 posts)→
More from coding & agent
- Anthropic researcher: 99% of engineers now run swarms of 300+ self-improving agents — AlishaOutridge · 2026-09-11
- Gergely Orosz: Shipping 10x PRs With AI Agents, Sites Fill With Small Regressions — ducha_aiki · 2026-09-11
- Same Echo Maze prompt, three frontier models: all passed visually but shipped the same hidden bug — eyishazyer · 2026-09-11
- Astra storyboards plus Minimax H3 per-shot generation boost video success rates — Hailuo_AI · 2026-09-11
- Codex tip: use Sol with Astra and Luna sub-agents to save usage — pvncher · 2026-09-11
- agents-best-practices: a provider-neutral Agent Skill for designing and auditing agentic harnesses — tom_doerr · 2026-09-11