Blog
Writing
On AI agent authorization, prompt injection, policy design, and the token-lifecycle infrastructure underneath it.
Your agent logs in as you. It shouldn't get to be you.
Authentication is solved; authorization isn't. A prompt-injected agent tries to exfiltrate your inbox and physically can't — the deny fires before the tool runs, with a signed receipt of the attempt. Why nominee is the missing half.
Read →Your AI agent's OAuth token refresh is probably broken.
Short-lived access tokens break grab-up-front across an approval pause. Rotating refresh tokens break naive refresh under concurrency — 7/8 calls fail with invalid_grant. A runnable proof, and the tiny no-SaaS fix.
Read →Your agent authenticates at 9am. By 3pm its token is dead.
OAuth tokens expire. AI agents don't stop. Here's why this is a harder problem than it looks, and how nominee solves it without locking you to a single identity provider.
Read →