build1 publisher
tenant-invariant denies an agent's tool call when the server cannot resolve the resource owner
The experimental Rust crate keeps tenant_id out of the tool schema and compares an authenticated actor's tenant against ownership that the server resolved itself, allowing the call only when the two values match.
Publishers:dev.to
Reality
- Evidence45
- Adoption8
- Hype gap−10
- Incentives30
- Confidence55