HN

Comments (25)

• Menu

  911viper
  Following the same thread as souvik1997 here: the leak problem gets worse in shared rooms than in shared sessions. When several principals (humans plus their own agents) sit in one channel, the transcript becomes the privilege boundary. Whatever an agent read in a higher-privileged turn is sitting in the context of every later turn in that room.What we hit building exactly that, rooms where humans and bots are peers: you can't scope a token to an agent, you have to scope it to an (agent, room) pair, and then decide what happens to the derived artifacts. Tool output, file handles, and the memory blob the agent writes back all outlive the session and get replayed into the next one.So how are you handling derived state? Is agent memory a new principal holding the intersection of the rights of the sessions that fed it, or does it just inherit and you rely on the model not to act on stale context?
• Menu

  jeswin
  This might seem like an aggressive question. But it's one to be asked of products dealing with auth.For a security-centric product, how would I trust your fully vibe-coded product if I can't see the source code?
• Menu

  souvik1997
  Looks cool!One aspect of multi-user agent security, which I think is underexplored, is how context from a higher-privileged session might "leak" into a lower privileged session. Suppose the CEO of a company uses your shared openclaw agent and the agent writes sensitive data (investor emails, for example) to its memory. My understanding is this is not protected by Alter. Then a contractor uses the same agent and can read that same memory. It seems to me that a better agent harness for this kind of multi-user use case is needed; the standard ones like openclaw and claude code simply are not designed for it. Would love your thoughts!
• Menu

  avikonduru
  How do you handle permissions when the downstream service only offers a shared API key? For example, two sales reps can use the same CRM endpoint but should only access their own accounts. Does Alter check record ownership, or does the developer still need to supply that logic?
• Menu

  yaoke259
  what's the advantage of a tool like this compared to existing mature tools like infisical?
• Menu

  luis_valerio
  One question from the infrastructure side (i'm running a similar scenario but for infrastucture) where any mistake could not be reversible such as a deletion of a resource.How do you handle an agent that has valid authorization but has been prompt-injected?
• 911viper
  [dead]
• Menu

  mauvehed
  That website is literally a vibe-coded template.. How can we put any trust into the app itself?