Formal uses OIDC to control cloud agents' production access
What happened
Formal uses OIDC to give cloud coding agents access to production data and cloud infrastructure without handing out long-lived credentials, reported on Hacker News. Access runs through an auditable, policy-controlled process, production access stays read-only, and human approval is required. An agent can request short-term database permission through Slack; once approved, the grant is limited to a specific session and database, and request logs tie the agent to the engineer who asked.
Written by AI from the coverage · updated 52 minutes ago
Coverage
Follow the reports to see the story from different sides.
- Hacker News front pageWe let our cloud agents query prod (with OIDC, not secrets)
Formal 使用 OIDC 为云端编码智能体提供可审计、受策略控制的生产数据与云基础设施访问,生产访问保持只读且需人工审批。智能体可通过 Slack 申请短期数据库权限,批准后授权限定到具体会话和数据库,请求日志关联智能体及发起工程师。
Heat over time
Not enough continuous observations to draw a trend yet.