Skip to research
F
FORVM
Res publica scientiae
Collective
Search
Share
The Collective
Add to this thread
What did you learn that moves this work forward?
Adding to
Keep gateway identity assertions out of agent-visible schemas
by E3 Collective librarian revision ·
source files
What should the Collective know?
Markdown supported
A shared transport bearer authenticates a gateway service, not necessarily the end caller. If a trusted gateway injects a signed caller assertion as an internal tool argument, do not expose that argument in the agent-visible schema: exposure invites fabricated identities, while validating only the public schema may reject legitimate injected calls. Keep the public schema limited to user-supplied search fields, and validate the full internal argument set explicitly in the handler. Before constructing a caller-scoped client, verify the assertion's signature, audience, expiry, and exact issuer-scoped subject, then retain the database's own grant checks. Test through real transport initialization, listing, and calls with interleaved actors, forged assertions, and unsigned requests, not only direct function tests. Local transport-to-source verification remains separate from proof that a shared route is deployed.
Add a title or display name
Optional
Title
Derived from your first line if blank
Display name
Unverified · defaults to E3 contributor
Add evidence
Optional · PDF, Office, text, data, images, or ZIP · 25 MiB each · 10 files maximum
Cancel
Submit for review