Creators of SpiceDB: https://xitter.cf/t.co/oSDTIhg5xi Read how ChatGPT uses AuthZed for authorization: https://xitter.cf/t.co/anUr0CQZuL
NYC / Remote
Joined July 2020
- Tweets849
- Following1.1K
- Followers1.5K
- Likes382
Pinned Tweet
Wondering what the fuss about Relationship Based Access Control is?
Here's an explainer using....a MIDI Keyboard?!
youtu.be/nPL3W_oHSrE?si=zByq…
New in the SpiceDB Playground: Explain.
Toggle it on and get AI-generated, plain-language annotations for every definition and relation in your schema. Compact or Full detail.
Handy when you're learning the schema language or untangling a big schema.
play.authzed.com
AI that asks permission, not forgiveness.
At ClawCon Seattle, @samkim demoed SpiceClaw: fine-grained permissions for OpenClaw agents, so they only touch the data you intend.
Plus talks from @OpenClaw and @awscloud. Full recap: youtu.be/530L0MIQL6o
Rule from episode 5 of base-layer, worth remembering before episode 6 drops Thursday:
Don't let the agent decide if it needs authorization.
The moment the agent makes that call, your access control stops being deterministic.
Zoom's agentic search spans *many* third-party data sources, each with its own permissions. Their homegrown authz couldn't scale.
They chose AuthZed Dedicated. Now: sub-50ms checks at intense scale.
Full story: authzed.com/customers/zoom
Everyone's had the same idea this year: use more AI to secure AI.
Sohan Maheshwar says that's backwards. AI is probabilistic. Access control needs to be deterministic. Throwing more of one at the other doesn't make it more secure.
Episode 5 of base-layer is out now: authzed.com/base-layer/sohan…
When @Calendly's Notetaker AI needed to share recaps across users, groups, and workspaces, their ad hoc authorization couldn't keep up,
They adopted SpiceDB to standardize access control. Now GA, checks running 25-30ms.
authzed.com/spicedb/showcase…
Taylor Dolezal's commit history used to sit near zero. Now a device in his family room shows the trailing 30 days: 2,700 commits.
Episode 4 of Base Layer, with @onlydole of @dosu_ai, is out now.
authzed.com/base-layer/taylo…
AuthZed Materialize is now Generally Available for AuthZed Dedicated 🎉
Precomputes your most expensive permission checks in advance. Single-digit millisecond responses, even at enterprise scale.
authzed.com/blog/authzed-mat…
How it works, straight from Google's own Leopard index: youtube.com/watch?v=Zb_Q7_ZZ…
Spencer Kimball co-created GIMP in 1997, then went on to found @cockroachdb.
His take: governance, not capability, is what's actually blocking AI adoption.
Episode 3 of base-layer is out now.
authzed.com/base-layer/spenc…
She built a hair-care app for herself, used it for months, then deleted it.
Emilie Schario of @kilocode calls it selfieware: no users, no tracking, no authorization. Built because the cost of building dropped below the cost of caring.
Listen here: authzed.com/base-layer/emili…
Seats are still open for Thursday's roundtable on permissions in agentic AI, hosted by AuthZed CEO @JacobMoshenko
Past attendees have come from Pinterest, Turo, NBA, and Adobe.
If you're building internal AI systems, this is for you. authzed.com/events/roundtabl…
"I think you just can't trust pretty much any of your
infrastructure."
EP 01 of base-layer is live with @zsmithnyc of Datum on why the
internet needs an upgrade.
authzed.com/base-layer/zac-s…
We once made a video modeling Discord's permissions in SpiceDB. It took over an hour.
This time, one prompt got us there. The SpiceDB Playground Assistant writes the schema, generates test data, and validates it, live in your browser. Ask it why a check fails and it shows the actual trace, not a guess.
"Why can't alice view budget.pdf?"
Ask the SpiceDB Playground Assistant and it won't guess. It pulls the real debug trace and names the exact relation that's missing.
Try it: play.authzed.com
Your AI agent inherits real access to real systems the moment it touches your deploy pipeline.
We built a DevOps agent with @goose_oss and SpiceDB. Revoke its staging access, and prod access disappears automatically. No RBAC flag can do that. A relationship in the schema can.
#AIAgents #DevOps #ReBAC