edera.dev/stories/ocap...
And to be explicit, this is why I was thinking about it, really excited about the work we’ve been doing @edera.dev
And to be explicit, this is why I was thinking about it, really excited about the work we’ve been doing @edera.dev
Bounded Authority for AI Agents: Edera’s OCAP Model Explained
How Edera uses object-capability security and bounded authority to give AI agents only the access they need, so a compromise stays contained.
edera.dev
November 5, 2026 at 7:28 PM
edera.dev/stories/ocap...
And to be explicit, this is why I was thinking about it, really excited about the work we’ve been doing @edera.dev
And to be explicit, this is why I was thinking about it, really excited about the work we’ve been doing @edera.dev
(My hot take on LLM-centric development environments is that The People Yearn For OCap Smalltalk. But like. Maybe also with types.)
November 3, 2026 at 8:30 PM
(My hot take on LLM-centric development environments is that The People Yearn For OCap Smalltalk. But like. Maybe also with types.)
Give an agent a credential and you've given it everything that credential can do. OCAP Bounded Authority from Edera, gives agents narrow capabilities instead, like write access to one repo, while the credential stays out of reach. See it at Booth 226 at KubeCon NA.
Bounded Authority for AI Agents: Edera’s OCAP Model Explained
How Edera uses object-capability security and bounded authority to give AI agents only the access they need, so a compromise stays contained.
edera.dev
November 6, 2026 at 5:51 PM
Give an agent a credential and you've given it everything that credential can do. OCAP Bounded Authority from Edera, gives agents narrow capabilities instead, like write access to one repo, while the credential stays out of reach. See it at Booth 226 at KubeCon NA.
we need ocap...
similarly it's also quite bad how poorly OS security has been handled where the main posture is "simply don't allow RCE on your machine in the first place" instead of having protections that make even an RCE in userspace not really matter for system integrity
it's quite wonderful to see most spam filters crumble when the only thing they were gating was "how much effort did you put into passing the check"
November 1, 2026 at 7:58 AM
we need ocap...
OCAP Bounded Authority: Edera's Managed Approach to Object Capabilities
https://edera.dev/stories/ocap-bounded-authority
https://edera.dev/stories/ocap-bounded-authority
November 5, 2026 at 5:40 PM
OCAP Bounded Authority: Edera's Managed Approach to Object Capabilities
https://edera.dev/stories/ocap-bounded-authority
https://edera.dev/stories/ocap-bounded-authority
De Tweede Kamer spreekt over fossielvrije glastuinbouw.
Dan moeten ze eens inhoudelijk spreken met Skytree en OCAP.
Want het is nu niet goed ingeregeld nog. En dit speelt al jaren.
Het kan wel.
skytree.tech/nl-nl/inzich...
Dan moeten ze eens inhoudelijk spreken met Skytree en OCAP.
Want het is nu niet goed ingeregeld nog. En dit speelt al jaren.
Het kan wel.
skytree.tech/nl-nl/inzich...
Hoe de Nederlandse glastuinbouw systeeminnovatie aanjaagt | Skytree
Nederlandse kassen stappen af van fossiele CO₂. Ontdek hoe Direct Air Capture (DAC) zorgt voor een circulaire koolstofvoorziening, netflexibiliteit en negatieve emissies in de tuinbouw.
skytree.tech
November 5, 2026 at 2:02 PM
De Tweede Kamer spreekt over fossielvrije glastuinbouw.
Dan moeten ze eens inhoudelijk spreken met Skytree en OCAP.
Want het is nu niet goed ingeregeld nog. En dit speelt al jaren.
Het kan wel.
skytree.tech/nl-nl/inzich...
Dan moeten ze eens inhoudelijk spreken met Skytree en OCAP.
Want het is nu niet goed ingeregeld nog. En dit speelt al jaren.
Het kan wel.
skytree.tech/nl-nl/inzich...
OCAP Bounded Authority: Edera's Managed Approach to Object Capabilities https://edera.dev/stories/ocap-bounded-authority (https://news.ycombinator.com/item?id=50380808)
Bounded Authority for AI Agents: Edera’s OCAP Model Explained
How Edera uses object-capability security and bounded authority to give AI agents only the access they need, so a compromise stays contained.
edera.dev
November 5, 2026 at 6:38 PM
OCAP Bounded Authority: Edera's Managed Approach to Object Capabilities https://edera.dev/stories/ocap-bounded-authority (https://news.ycombinator.com/item?id=50380808)
and December 10th, 1:30-2:30, I'll be at the Canadian Bar Association Privacy and Access Law Conference doing a panel on "OCAP Principles and First Nations Information Governance and Data Sovereignty"
PheedLoop
PheedLoop: Hybrid, In-Person & Virtual Event Software
site.pheedloop.com
November 4, 2026 at 8:52 PM
and December 10th, 1:30-2:30, I'll be at the Canadian Bar Association Privacy and Access Law Conference doing a panel on "OCAP Principles and First Nations Information Governance and Data Sovereignty"
Haha, you said the O-word. I've spent the past several years working in ses / hardenedjs.org, which is to say OCap JS/TS.
November 3, 2026 at 9:03 PM
Haha, you said the O-word. I've spent the past several years working in ses / hardenedjs.org, which is to say OCap JS/TS.
OCAP Bounded Authority: Edera's Managed Approach to Object Capabilities
Discussion | hackernews | Author: virtio_vixen
#Security
Discussion | hackernews | Author: virtio_vixen
#Security
OCAP Bounded Authority: Edera's Managed Approach to Object Capabilities
How Edera uses object-capability security and bounded authority to give AI agents only the access they need, so a compromise stays contained.
edera.dev
November 5, 2026 at 4:55 PM
OCAP Bounded Authority: Edera's Managed Approach to Object Capabilities
Discussion | hackernews | Author: virtio_vixen
#Security
Discussion | hackernews | Author: virtio_vixen
#Security
OCAP Bounded Authority: Edera's Managed Approach to Object Capabilities
comments · posted on 2026.11.05 at 11:01:26 (c=0, p=11)
comments · posted on 2026.11.05 at 11:01:26 (c=0, p=11)
November 5, 2026 at 4:51 PM
OCAP Bounded Authority: Edera's Managed Approach to Object Capabilities
comments · posted on 2026.11.05 at 11:01:26 (c=0, p=11)
comments · posted on 2026.11.05 at 11:01:26 (c=0, p=11)
Il avait obtenu un logement social en seulement sept jours : le bailleur social met six ans pour le faire expulser et il ne pourra pas invoquer la trêve hivernale.
➡️ https://l.lindependant.fr/Ocap
➡️ https://l.lindependant.fr/Ocap
November 8, 2026 at 5:44 AM
Il avait obtenu un logement social en seulement sept jours : le bailleur social met six ans pour le faire expulser et il ne pourra pas invoquer la trêve hivernale.
➡️ https://l.lindependant.fr/Ocap
➡️ https://l.lindependant.fr/Ocap
Een ideale oplossing is, waar de glastuinbouw CO2 uit DACS gebruikt in de zomer (op zon) en in de winter de DACS via OCAP, DRC en DSC en Aramis voor permanente CO2-verwijdering zorgt (op wind).
Aangevuld met biogene CO2 met hetzelfde recept.
Maar maak het economisch & wettelijk in orde.
Aangevuld met biogene CO2 met hetzelfde recept.
Maar maak het economisch & wettelijk in orde.
November 5, 2026 at 2:08 PM
Een ideale oplossing is, waar de glastuinbouw CO2 uit DACS gebruikt in de zomer (op zon) en in de winter de DACS via OCAP, DRC en DSC en Aramis voor permanente CO2-verwijdering zorgt (op wind).
Aangevuld met biogene CO2 met hetzelfde recept.
Maar maak het economisch & wettelijk in orde.
Aangevuld met biogene CO2 met hetzelfde recept.
Maar maak het economisch & wettelijk in orde.
I find that the greatest difficulty is that, even when you have language-level ocaps, the trouble is bridging into all of the resources you want to use, which are very much non-ocap.
November 3, 2026 at 9:03 PM
I find that the greatest difficulty is that, even when you have language-level ocaps, the trouble is bridging into all of the resources you want to use, which are very much non-ocap.
Indigenous communities cultural data is being exploited by AI systems without proper consent or control,risking data colonialism.Frameworks like OCAP and CARE aim to empower communities,but legal gaps remain.Change requires upfront governance and community involvement.
Scraped Without Asking
Indigenous communities' cultural data is being exploited by AI systems without proper consent or control, risking data colonialism. Frameworks like OCAP and CARE aim to empower communities, but legal gaps remain. Change requires upfront governance and community involvement.
#DataSovereignty #IndigenousRights #AIethics
dev.to
October 26, 2026 at 12:01 PM
Indigenous communities cultural data is being exploited by AI systems without proper consent or control,risking data colonialism.Frameworks like OCAP and CARE aim to empower communities,but legal gaps remain.Change requires upfront governance and community involvement.
FNIGC’s The Fundamentals of OCAP® online course introduces learners to the First Nations Principles of OCAP® and their role in supporting FN rights to govern their own data.
Register to take the online course today: fnigc.ca/ocap-trainin...
Register to take the online course today: fnigc.ca/ocap-trainin...
October 23, 2026 at 5:32 PM
FNIGC’s The Fundamentals of OCAP® online course introduces learners to the First Nations Principles of OCAP® and their role in supporting FN rights to govern their own data.
Register to take the online course today: fnigc.ca/ocap-trainin...
Register to take the online course today: fnigc.ca/ocap-trainin...
📦 waaseyaa/anokii v0.1.0-alpha.14
Anokii, the first opinionated distribution built on Waaseyaa. Sovereign workspace for First Nations. OCAP-by-architecture. Working name pending language-keeper verification.
🔗 https://github.com/waaseyaa/anokii
Anokii, the first opinionated distribution built on Waaseyaa. Sovereign workspace for First Nations. OCAP-by-architecture. Working name pending language-keeper verification.
🔗 https://github.com/waaseyaa/anokii
October 20, 2026 at 6:00 PM
📦 waaseyaa/anokii v0.1.0-alpha.14
Anokii, the first opinionated distribution built on Waaseyaa. Sovereign workspace for First Nations. OCAP-by-architecture. Working name pending language-keeper verification.
🔗 https://github.com/waaseyaa/anokii
Anokii, the first opinionated distribution built on Waaseyaa. Sovereign workspace for First Nations. OCAP-by-architecture. Working name pending language-keeper verification.
🔗 https://github.com/waaseyaa/anokii
This reminds me of the time when OCAP was fighting to the deportation of a family and we sought advice from a prominent leftist with knowledge of the immigration system. He heard the facts of the case and then told us that our response should be to mobilize the working-class.
October 19, 2026 at 10:02 AM
This reminds me of the time when OCAP was fighting to the deportation of a family and we sought advice from a prominent leftist with knowledge of the immigration system. He heard the facts of the case and then told us that our response should be to mobilize the working-class.
Ocap, siiiccckk. Is this new for this effort or are there existing materials to point to? Webtiles seem need but I only recall one or two efforts to get em chatting!! Huge field of possibility. Heck yes ocap.
How'd you host the cloudflareos? Just running locally sure seems fine!
How'd you host the cloudflareos? Just running locally sure seems fine!
October 14, 2026 at 1:04 AM
Ocap, siiiccckk. Is this new for this effort or are there existing materials to point to? Webtiles seem need but I only recall one or two efforts to get em chatting!! Huge field of possibility. Heck yes ocap.
How'd you host the cloudflareos? Just running locally sure seems fine!
How'd you host the cloudflareos? Just running locally sure seems fine!
I have done this training offered by FNIGC and highly recommend the course as well.
fnigc.ca/ocap-trainin...
fnigc.ca/ocap-trainin...
September 30, 2026 at 9:38 PM
I have done this training offered by FNIGC and highly recommend the course as well.
fnigc.ca/ocap-trainin...
fnigc.ca/ocap-trainin...
Research underway
Working with an Indigenous-led research team, and in line with OCAP® principles, we are continuing our work on anti-Indigenous racism and its impact on health.
Working with an Indigenous-led research team, and in line with OCAP® principles, we are continuing our work on anti-Indigenous racism and its impact on health.
September 30, 2026 at 1:47 PM
Research underway
Working with an Indigenous-led research team, and in line with OCAP® principles, we are continuing our work on anti-Indigenous racism and its impact on health.
Working with an Indigenous-led research team, and in line with OCAP® principles, we are continuing our work on anti-Indigenous racism and its impact on health.
This is why the OCAP principles are essential for First Nations data governance; this framework should be adopted by every department of all levels of government across Canada, retroactively and going forward. fnigc.ca/ocap-training/
September 28, 2026 at 5:55 PM
This is why the OCAP principles are essential for First Nations data governance; this framework should be adopted by every department of all levels of government across Canada, retroactively and going forward. fnigc.ca/ocap-training/
"Governments count on us staying in our own lanes. Solidarity is how we refuse." OSBCU President Joe Tigani
A full day of workshops and a closing panel with OCHU, OPSEU, OCAP and Amazon organizers at Solidarity is Strength in Toronto. This fight is ours. ✊
A full day of workshops and a closing panel with OCHU, OPSEU, OCAP and Amazon organizers at Solidarity is Strength in Toronto. This fight is ours. ✊
September 27, 2026 at 10:00 PM
"Governments count on us staying in our own lanes. Solidarity is how we refuse." OSBCU President Joe Tigani
A full day of workshops and a closing panel with OCHU, OPSEU, OCAP and Amazon organizers at Solidarity is Strength in Toronto. This fight is ours. ✊
A full day of workshops and a closing panel with OCHU, OPSEU, OCAP and Amazon organizers at Solidarity is Strength in Toronto. This fight is ours. ✊
New on CRAN: RserveTS (0.8.3). View at https://CRAN.R-project.org/package=RserveTS
RserveTS: Typed Application Contracts for 'Rserve'
Defines a typed application contract between R backends and 'TypeScript' clients over 'Rserve'. Users specify the API architecture with typed object capability (Ocap) functions and compile matching 'TypeScript' schemas and deployment scripts for the server. The companion library 'rserve-ts', available on npm <<a href="https://www.npmjs.com/package/rserve-ts" target="_top">https://www.npmjs.com/package/rserve-ts</a>>, provides the client-side runtime that consumes those schemas.
CRAN.R-project.org
September 24, 2026 at 2:04 PM
New on CRAN: RserveTS (0.8.3). View at https://CRAN.R-project.org/package=RserveTS