2 posts tagged with "DID"

A problem every team deploying AI agents hits early: you want an agent to read one folder of documents — not your whole drive, not forever, and revocably. With Convex 0.8.8, DLFS drives can be shared exactly that way: a signed capability naming a DID URL like did:key:z6Mk<alice>/dlfs/docs, delegatable in chains, attenuated at every hop, verified against any DID method — and no central account system anywhere.

Convex 0.8.6 closes three authentication and merge-path weaknesses in the lattice's capability layer. Two of them were genuine bypasses in how UCAN tokens are verified and how capabilities are matched; the third turns a merge over untrusted data from a potential denial of service into a safe no-op. None of them are exotic — they are the kind of boundary bugs that hide in any authorisation system — and the fixes are worth writing down because the shape of each mistake is instructive.