# access control

Cloudflare released traffic analytics and finer-grained access policies for personal agents. Previously, sites saw these requests made on a person's behalf only as automated traffic, with little way to tell which agents were visiting or which pages they reached. Security Analytics now lists Personal Assistants as its own category and can filter by a single agent's paths, status codes and source networks; sites can also set Allow, Block on pages with ads, or Block for each supported personal agent.

Cloudflare released traffic analytics and finer-grained access policies for personal agents. Previously, sites saw these requests made on a person's behalf only as automated traffic, with little way to tell which agents were visiting or which pages they reached. Security Analytics now lists Personal Assistants as its own category and can filter by a single agent's paths, status codes and source networks; sites can also set Allow, Block on pages with ads, or Block for each supported personal agent.

VarOps built a memory system for AI agents working across an organization that distills each observation into a claim carrying who said what, when it held, and which source span proves it, instead of keeping raw transcript chunks. On LongMemEval, a public 500-question benchmark over long chat histories, this deliberately lossy distillation still put the right evidence in the top ten results for 99.8% of questions; ingesting about 35 million tokens cost $8.24 on two CPUs with no GPU. The system also makes time and absence explicit and resolves permissions before any model runs.

VarOps built a memory system for AI agents working across an organization that distills each observation into a claim carrying who said what, when it held, and which source span proves it, instead of keeping raw transcript chunks. On LongMemEval, a public 500-question benchmark over long chat histories, this deliberately lossy distillation still put the right evidence in the top ten results for 99.8% of questions; ingesting about 35 million tokens cost $8.24 on two CPUs with no GPU. The system also makes time and absence explicit and resolves permissions before any model runs.

The authors propose the Cryptographically Verifiable Agent Authorization (CVA) hypothesis, formalizing authorization as a relation RCVA that jointly binds an agent principal, a concrete authorization request, an execution context, and policy satisfaction, and provide candidate security properties plus an executable zero-knowledge proof of concept over Groth16 zk-SNARK; the prototype implements principal binding and plan-level request binding while context binding and runtime execution binding remain unimplemented.

The authors propose the Cryptographically Verifiable Agent Authorization (CVA) hypothesis, formalizing authorization as a relation RCVA that jointly binds an agent principal, a concrete authorization request, an execution context, and policy satisfaction, and provide candidate security properties plus an executable zero-knowledge proof of concept over Groth16 zk-SNARK; the prototype implements principal binding and plan-level request binding while context binding and runtime execution binding remain unimplemented.