Cryptographic Authorization
HMAC-signed capabilities for every operation. No permission guessing, no ambient authority, no privilege escalation.
Production-grade security for agents that control real systems
Every operation in Authority Nanos follows this security pipeline:
Authority Nanos is a fork of Nanos that adds the Authority Kernel — a capability-based security layer purpose-built for running autonomous AI agents in production.
Create a policy file (/ak/policy.json):
{
"version": "1.0",
"fs": {
"read": ["/app/**", "/lib/**"],
"write": ["/tmp/**"]
},
"net": {
"dns": ["api.example.com"],
"connect": ["dns:api.example.com:443"]
},
"profiles": ["tier1-musl"]
}Build and run:
authority build myapp -c config.json
authority run myapp| Component | Status |
|---|---|
| Core Kernel | Stable |
| Authority Kernel | Stable |
| Security Invariants (INV-1 to INV-4) | Enforced |
| Documentation | Active |
See the roadmap for upcoming features.