corpus.blog
41554 blogs · [ { "id": "01a087b2-78bd-70c6-be6c-46d92aa3b38a", "title": "Kerberos Won Because Nobody Had to Implement It", "url": "https://notes.karlmcguinness.com/notes/kerberos-won-because-nobody-had-to-implement-it/", "published_at": "2026-08-10T23:00:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-62396b189808", "title": "The Runtime Mints the Identity. That Does Not Make It the Authority.", "url": "https://notes.karlmcguinness.com/notes/the-runtime-mints-the-identity/", "published_at": "2026-08-10T22:00:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-62396bbe475f", "title": "Agent Authority Has No General System of Record", "url": "https://notes.karlmcguinness.com/notes/agent-authority-has-no-system-of-record/", "published_at": "2026-08-10T21:00:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-62396bd45922", "title": "The MCP Lesson", "url": "https://notes.karlmcguinness.com/notes/the-mcp-lesson/", "published_at": "2026-08-10T20:00:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-62396bf9828f", "title": "Cross App Access Shows How the Layered Play Ships", "url": "https://notes.karlmcguinness.com/notes/cross-app-access-is-the-layered-play-shipping/", "published_at": "2026-08-10T19:00:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-62396c82e316", "title": "A Blocked Agent Is a Captive Client", "url": "https://notes.karlmcguinness.com/notes/a-blocked-agent-is-a-captive-client/", "published_at": "2026-08-10T18:00:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-62396cab021c", "title": "The Company's Memory Must Be an Enterprise Record", "url": "https://notes.karlmcguinness.com/notes/the-companys-memory-is-an-enterprise-record/", "published_at": "2026-08-10T17:00:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-62396d9f82b7", "title": "Continuity Is Not One Thing", "url": "https://notes.karlmcguinness.com/notes/continuity-is-not-one-thing/", "published_at": "2026-08-10T16:30:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-62396e09fd12", "title": "The Continuity Evaluation Kit", "url": "https://notes.karlmcguinness.com/notes/continuity-evaluation-kit/", "published_at": "2026-08-10T16:00:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-62396e82a2a2", "title": "The Enterprise Agent Control Stack", "url": "https://notes.karlmcguinness.com/notes/the-enterprise-agent-stack/", "published_at": "2026-08-10T16:00:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-62396f6835a7", "title": "Least-Privilege MCP Tool Calls Need a Mission", "url": "https://notes.karlmcguinness.com/notes/least-privilege-mcp-tool-calls-need-a-mission/", "published_at": "2026-07-22T16:00:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-62396fffb677", "title": "Least Exposure Is Broader Than Least Privilege", "url": "https://notes.karlmcguinness.com/notes/least-exposure-is-broader-than-least-privilege/", "published_at": "2026-07-22T15:50:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-62397050b9a7", "title": "The Question Authorization Never Answered", "url": "https://notes.karlmcguinness.com/notes/the-question-authorization-never-answered/", "published_at": "2026-07-22T15:40:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-6239711e16c4", "title": "Weighing Mission-Bound Authorization", "url": "https://notes.karlmcguinness.com/series/weighing-mission-bound-authorization/", "published_at": "2026-07-22T15:00:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-62397127abc2", "title": "Testing Mission-Bound Authorization", "url": "https://notes.karlmcguinness.com/series/testing-mission-bound-authorization/", "published_at": "2026-07-22T14:00:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-623971f0d509", "title": "Building Mission-Bound Authorization", "url": "https://notes.karlmcguinness.com/series/building-mission-bound-authorization/", "published_at": "2026-07-22T13:00:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-6239720c5328", "title": "Designing Mission-Bound Authorization", "url": "https://notes.karlmcguinness.com/series/designing-mission-bound-authorization/", "published_at": "2026-07-22T12:20:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-623972de78c3", "title": "What the Corporate Card Already Solved", "url": "https://notes.karlmcguinness.com/series/what-the-corporate-card-already-solved/", "published_at": "2026-07-22T11:20:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-6239734e6510", "title": "Mission-Bound Authorization: The Complete Edition", "url": "https://notes.karlmcguinness.com/mission-handbook/read/", "published_at": "2026-07-22T11:10:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-6239738f321a", "title": "The Identity Continuation Assertion", "url": "https://notes.karlmcguinness.com/notes/identity-continuation-assertion/", "published_at": "2026-07-08T16:00:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-623973c36bd7", "title": "Trusting Issuers in Open-World OAuth", "url": "https://notes.karlmcguinness.com/notes/trusting-issuers-in-open-world-oauth/", "published_at": "2026-07-05T21:00:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-623973e84e94", "title": "Closing the Gaps in Least-Privilege MCP Tool Calls", "url": "https://notes.karlmcguinness.com/notes/closing-the-gaps-least-privilege-mcp-tool-calls/", "published_at": "2026-06-26T17:00:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-62397403dce7", "title": "Two Models for Least-Privilege MCP Tool Calls", "url": "https://notes.karlmcguinness.com/notes/least-privilege-mcp-tool-calls/", "published_at": "2026-06-25T17:00:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-6239747ee79e", "title": "Authorization Is the Other Half of Executable Intent", "url": "https://notes.karlmcguinness.com/notes/authorization-is-the-other-half-of-executable-intent/", "published_at": "2026-06-10T16:00:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-623974b97bcc", "title": "Re-Subjecting Is a Mint, Not an Attenuation", "url": "https://notes.karlmcguinness.com/notes/re-subjecting-is-a-mint-not-an-attenuation/", "published_at": "2026-06-08T16:00:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-623974e96f39", "title": "Authorization Denied Is No Longer Enough", "url": "https://notes.karlmcguinness.com/notes/authorization-denied-is-no-longer-enough/", "published_at": "2026-06-02T16:00:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-623975a858e1", "title": "SAML at the Post-Quantum Crossroads", "url": "https://notes.karlmcguinness.com/notes/saml-at-the-post-quantum-crossroads/", "published_at": "2026-05-28T19:00:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-623976405589", "title": "The Agent Provider Is the IdP: A Standards Reading of WorkOS auth.md", "url": "https://notes.karlmcguinness.com/notes/agent-provider-is-the-idp-standards-reading-of-workos-auth-md/", "published_at": "2026-05-22T19:00:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-623976d538a5", "title": "Sessions Are Not Missions", "url": "https://notes.karlmcguinness.com/notes/sessions-are-not-missions/", "published_at": "2026-05-12T04:08:15+00:00" }, { "id": "01a087b2-78be-728c-8cf1-623976da19cf", "title": "Client Instances Are Actors, Not New Clients", "url": "https://notes.karlmcguinness.com/notes/client-instances-are-actors-not-new-clients/", "published_at": "2026-05-05T17:00:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-623977450062", "title": "Enterprise SaaS Needs OAuth Federation Now", "url": "https://notes.karlmcguinness.com/notes/enterprise-saas-needs-oauth-federation-now/", "published_at": "2026-04-20T03:05:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-6239775d9ec4", "title": "AAuth Now Has a Mission Layer", "url": "https://notes.karlmcguinness.com/notes/aauth-now-has-a-mission-layer/", "published_at": "2026-04-13T18:21:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-623977ee2063", "title": "ID-JAG Beyond the Enterprise IdP", "url": "https://notes.karlmcguinness.com/notes/id-jag-beyond-the-enterprise-idp/", "published_at": "2026-04-05T19:00:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-62397828bf07", "title": "Open-World OAuth Still Needs Mission Shaping", "url": "https://notes.karlmcguinness.com/notes/open-world-oauth-still-needs-mission-shaping/", "published_at": "2026-03-21T17:00:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-6239782e6d30", "title": "OAuth for Open-World Ecosystems", "url": "https://notes.karlmcguinness.com/notes/oauth-for-open-world-ecosystems/", "published_at": "2026-03-20T17:00:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-6239786fccdb", "title": "Standardize `act` Across Assertion Grants and JWT Access Tokens", "url": "https://notes.karlmcguinness.com/notes/standardize-act-across-assertion-grants-and-jwt-access-tokens/", "published_at": "2026-03-18T17:30:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-6239792ae1f7", "title": "Mission Shaping Is Not Enough", "url": "https://notes.karlmcguinness.com/notes/mission-shaping-is-not-enough/", "published_at": "2026-03-18T16:00:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-62397a18d202", "title": "The Mission Shaping Problem", "url": "https://notes.karlmcguinness.com/notes/the-mission-shaping-problem/", "published_at": "2026-03-17T16:00:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-62397ab4af9d", "title": "Why Mission-Bound OAuth Might Be the Wrong Answer", "url": "https://notes.karlmcguinness.com/notes/why-mission-bound-oauth-might-be-the-wrong-answer/", "published_at": "2026-03-15T19:00:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-62397b15f30e", "title": "Mission Architecture on AAuth", "url": "https://notes.karlmcguinness.com/notes/mission-architecture-on-aauth/", "published_at": "2026-03-15T16:00:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-62397bf89a1c", "title": "Client Context and ID-JAG for Mission-Bound OAuth", "url": "https://notes.karlmcguinness.com/notes/client-context-and-id-jag-for-mission-bound-oauth/", "published_at": "2026-03-14T16:00:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-62397c6cdf59", "title": "Mission-Bound OAuth", "url": "https://notes.karlmcguinness.com/notes/mission-bound-oauth/", "published_at": "2026-03-13T16:00:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-62397d53ad8d", "title": "Agents Don't Need Your Passport. They Need Your Authority.", "url": "https://notes.karlmcguinness.com/notes/agents-dont-need-your-passport-they-need-your-authority/", "published_at": "2026-02-22T06:59:09+00:00" }, { "id": "01a087b2-78be-728c-8cf1-62397dae262e", "title": "From Passports to Power of Attorney", "url": "https://notes.karlmcguinness.com/notes/from-passports-to-power-of-attorney/", "published_at": "2026-02-22T06:59:09+00:00" }, { "id": "01a087b2-78be-728c-8cf1-62397dd79c4c", "title": "Governing the Stay, Not Just the Entry", "url": "https://notes.karlmcguinness.com/notes/governing-the-stay-not-just-the-entry/", "published_at": "2026-02-22T06:59:09+00:00" }, { "id": "01a087b2-78be-728c-8cf1-62397ebdb75d", "title": "About", "url": "https://notes.karlmcguinness.com/about/", "published_at": "2026-02-21T00:00:00+00:00" }, { "id": "01a087b2-78be-728c-8cf1-62397f99029f", "title": "Welcome to Control Plane", "url": "https://notes.karlmcguinness.com/notes/welcome-to-control-plane/", "published_at": "2025-04-29T06:22:40+00:00" } ] posts Claim your blog
Back to notes.karlmcguinness.com
Blog · corpus.blog/blogs/notes.karlmcguinness.com/posts

notes.karlmcguinness.com

notes.karlmcguinness.com

2026

Kerberos Won Because Nobody Had to Implement Itoriginal ↗
10 Aug 2026
The Runtime Mints the Identity. That Does Not Make It the Authority.original ↗
10 Aug 2026
Agent Authority Has No General System of Recordoriginal ↗
10 Aug 2026
The MCP Lessonoriginal ↗
10 Aug 2026
Cross App Access Shows How the Layered Play Shipsoriginal ↗
10 Aug 2026
A Blocked Agent Is a Captive Clientoriginal ↗
10 Aug 2026
The Company's Memory Must Be an Enterprise Recordoriginal ↗
10 Aug 2026
Continuity Is Not One Thingoriginal ↗
10 Aug 2026
The Continuity Evaluation Kitoriginal ↗
10 Aug 2026
The Enterprise Agent Control Stackoriginal ↗
10 Aug 2026
Least-Privilege MCP Tool Calls Need a Missionoriginal ↗
22 Jul 2026
Least Exposure Is Broader Than Least Privilegeoriginal ↗
22 Jul 2026
The Question Authorization Never Answeredoriginal ↗
22 Jul 2026
Weighing Mission-Bound Authorizationoriginal ↗
22 Jul 2026
Testing Mission-Bound Authorizationoriginal ↗
22 Jul 2026
Building Mission-Bound Authorizationoriginal ↗
22 Jul 2026
Designing Mission-Bound Authorizationoriginal ↗
22 Jul 2026
What the Corporate Card Already Solvedoriginal ↗
22 Jul 2026
Mission-Bound Authorization: The Complete Editionoriginal ↗
22 Jul 2026
The Identity Continuation Assertionoriginal ↗
8 Jul 2026
Trusting Issuers in Open-World OAuthoriginal ↗
5 Jul 2026
Closing the Gaps in Least-Privilege MCP Tool Callsoriginal ↗
26 Jun 2026
Two Models for Least-Privilege MCP Tool Callsoriginal ↗
25 Jun 2026
Authorization Is the Other Half of Executable Intentoriginal ↗
10 Jun 2026
Re-Subjecting Is a Mint, Not an Attenuationoriginal ↗
8 Jun 2026
Authorization Denied Is No Longer Enoughoriginal ↗
2 Jun 2026
SAML at the Post-Quantum Crossroadsoriginal ↗
28 May 2026
The Agent Provider Is the IdP: A Standards Reading of WorkOS auth.mdoriginal ↗
22 May 2026
Sessions Are Not Missionsoriginal ↗
12 May 2026
Client Instances Are Actors, Not New Clientsoriginal ↗
5 May 2026
Enterprise SaaS Needs OAuth Federation Noworiginal ↗
20 Apr 2026
AAuth Now Has a Mission Layeroriginal ↗
13 Apr 2026
ID-JAG Beyond the Enterprise IdPoriginal ↗
5 Apr 2026
Open-World OAuth Still Needs Mission Shapingoriginal ↗
21 Mar 2026
OAuth for Open-World Ecosystemsoriginal ↗
20 Mar 2026
Standardize `act` Across Assertion Grants and JWT Access Tokensoriginal ↗
18 Mar 2026
Mission Shaping Is Not Enoughoriginal ↗
18 Mar 2026
The Mission Shaping Problemoriginal ↗
17 Mar 2026
Why Mission-Bound OAuth Might Be the Wrong Answeroriginal ↗
15 Mar 2026
Mission Architecture on AAuthoriginal ↗
15 Mar 2026
Client Context and ID-JAG for Mission-Bound OAuthoriginal ↗
14 Mar 2026
Mission-Bound OAuthoriginal ↗
13 Mar 2026
Agents Don't Need Your Passport. They Need Your Authority.original ↗
22 Feb 2026
From Passports to Power of Attorneyoriginal ↗
22 Feb 2026
Governing the Stay, Not Just the Entryoriginal ↗
22 Feb 2026
Aboutoriginal ↗
21 Feb 2026

2025

Welcome to Control Planeoriginal ↗
29 Apr 2025