framework
Cedar is an open-source AWS authorization policy language for defining fine-grained RBAC and ABAC rules governing access in apps and agents.
No evidence-backed relationships are recorded.
A runnable two-agent example moves every refusal into the catalog that vends credentials, because a key covers a storage prefix and there are no rows at the point of enforcement. The author works on that catalog.
Reality
Mandatum signs each delegation link to its parent by hash and leaves the decision to an AuthZEN policy engine. The sequence check that blocks a write after an external read needs a single in-process enforcement point.
Reality
Joint guidance from AWS and the SANS Institute argues that an agent's system prompt can be talked around, so retrieval has to be scoped to the requesting user's own entitlements and filtered before the model sees results.
Reality
ADOP keeps agents in development and promotes deterministic artifacts to production, and AWS says your architecture governs the coding tool. The documented path still runs on Claude Code.
Reality
Amazon says you should be able to name every AI agent touching customer data in under a minute. Its own worked example explains why most teams cannot: the record is a file on a laptop.
Reality