TLDR Tech / Crypto
Human Authorization in Agentic Workflows
As AI agents gain authority to open pull requests, trigger deployments, and make API calls using legitimate credentials, the security question shifts from authentication to whether a human intended a specific action. Tempo's Voight-Kampff system addresses this by requiring a Touch ID tap before any high-impact operation proceeds, with each approval cryptographically bound to the specific changeset or request via a P-256 key stored in Apple's Secure Enclave. The private key cannot be exported and is invalidated if enrolled fingerprints change, making credential theft or malware-based approval ineffective even on a compromised machine. The system integrates into GitHub branch protection status checks, Kubernetes API proxying, and GitHub Actions deployment gates, extending the human-in-the-loop guarantee across standard DevOps surfaces.
Read the full story