TLDR IT · MISCELLANEOUS

THE AGENT ACCESS MODEL

blog.cloudflare.com26 min read

Summary from the TLDR IT newsletter

Cloudflare's Agent Access Model (AAM) is a security framework that treats each agent task execution graph as untrusted and authorizes every action against the agent, task, and accumulated resource state. Agent controls should use short-lived, sender-constrained credentials and inline enforcement in the harness and network, while a one-way Trust Ratchet can remove capabilities when protected events occur.