OpenFGA for Agent Authorization
I am considering openfga.dev as a tool for agent authorization.
The problem this tool solves is similar to what Google Zanzibar does. They say it inspired them. It handles authorization, which in my case means defining permissions for each agent in the system, specifically which other agents each of my agents can access.
For external restrictions, such as which repositories an agent can access, it is more convenient to enforce them at the token level. Each agent has its own token, with restrictions set when the token is created. When I automate token creation, I may come up with a way to describe permissions in code. That may require a more complex and general solution.
But for now, I want to get the agents running under the new setup in any form, then improve it. This iteration is taking too long.
