Documentation
¶
Overview ¶
Command twoasks demonstrates the #1 cross-cutting AI-agent authorization problem — the CONFUSED DEPUTY — and how Legant closes it. One shared "analytics copilot" agent serves two humans: Alice (entitled to finance and sales data) and Bob (sales only). Today an agent runs under its OWN broad identity, so Bob extracts finance data just by asking, and every query is logged under the agent's service account — the human is never named.
With Legant, each request carries an RFC 8693 sub/act token minted for the ACTUAL human, scoped to THAT human's data; the warehouse authorizes every query OFFLINE against the asker's delegated audiences, and the audit names the human.
No database, no Docker:
go run ./examples/twoasks # or make demo-twoasks
NOTE (honest): Legant authorizes the QUERY; it does not redact values inside returned rows — column/row masking remains a warehouse-policy/DLP job. It bounds what the (possibly prompt-injected) agent may ask for, and names who asked.
Source Files