https://blog.christianposta.com/Christian PostaChristian Posta's blog on Istio, Envoy, API gateways, MCP, and the infrastructure that runs production AI agents. 2026-10-08T20:23:46+00:00 Christian Posta https://blog.christianposta.com/ Jekyll © 2026 Christian Posta /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png Human-in-the-loop Authorization Patterns for Agents2026-08-24T23:17:52+00:00 2026-10-08T20:22:24+00:00 https://blog.christianposta.com/human-in-the-loop-authorization-patterns-for-agents/ Christian Posta In my work with customers adopting and securing AI agents at scale in enterprise environments, we are running into “human in the loop” usecases. For example, usecases where a sensitive operation MUST be approved by a human; sometimes even a different human than the one on whose behalf the agent is acting. As part of my work on Agent Identity and Access Management here at Solo.io, I research var... APIs for Probabilistic Callers2026-08-11T21:34:28+00:00 2026-08-11T21:34:28+00:00 https://blog.christianposta.com/apis-for-probabilistic-callers/ Christian Posta APIs designed for AI agents need to enforce resource-owned invariants or surface them into the enforcement path, not just expose operations guarded by caller-side authorization checks. Credential Brokering Patterns for AI Agents Part 2: Protecting the Token Vault with AWS KMS2026-08-03T16:00:00+00:00 2026-08-03T16:00:00+00:00 https://blog.christianposta.com/credential-brokering-patterns-for-ai-agent-egress-part2/ Christian Posta A credential broker fixes the agent's credential problem by concentrating credentials somewhere else. Here's how we keep that concentration from becoming a single point of total failure. Credential Brokering Patterns for AI Agents Part 1: Don't Give the Agent the Keys2026-07-27T10:41:23+00:00 2026-08-04T04:26:51+00:00 https://blog.christianposta.com/credential-brokering-patterns-for-ai-agent-egress/ Christian Posta The safest credential for an AI agent is one it never holds. A look at the CB4A draft, why the proxy model is the one that actually works against today's bearer-token APIs, and how we build it in agentgateway. Okta SAML and Keycloak for ID-JAG Cross App Access2026-07-13T01:05:21+00:00 2026-07-15T22:59:25+00:00 https://blog.christianposta.com/okta-saml-and-keycloak-for-id-jag-cross-app-access/ Christian Posta A working Okta SAML/SSO → ID-JAG → Keycloak access-token path for Cross-App Access