Edera gives AI agents capabilities instead of credentials

OCAP Bounded Authority: Edera's Managed Approach to Object Capabilities

AI agents inherit whatever authority their credentials carry, so a single prompt injection can expose every repo, secret, or API a token can reach. Edera proposes bounded authorities: narrow, composable object capabilities where a broker holds the credential and the agent gets only a handle for one operation. Its capcurl and capsudo tools apply this to HTTP APIs and privileged commands, pairing with SPIFFE identity and MicroVM isolation so authority is explicit rather than ambient.