Edera Redefines AI Agent Security with Bounded Authority and Credential-Free Access

New security capabilities leverage object capabilities and let enterprises grant AI agents precise permissions without exposing credentials or expanding their access to critical systems

SEATTLE, Nov. 5, 2026 /PRNewswire/ -- Edera, the leader in hardened runtime isolation for containers and AI agents, today announced Object Capability Bounded Authority, a new approach to using object capabilities for securing autonomous AI agents, enabling enterprises to grant agents permission to perform specific actions without exposing the credentials behind them. It is the latest technology innovation available from the company's suite of Agent Runtime capabilities that were launched as part of Project Lunchbox and developed by Edera co-founder, distinguished engineer, and Alpine Linux maintainer Ariadne Conill.

As enterprises increasingly deploy AI coding agents, Model Context Protocol (MCP) servers and other autonomous workloads into production, they face a fundamental security dilemma: agents need access to repositories, APIs and infrastructure to perform useful work, but giving them credentials and broad permissions creates significant risk if they are compromised or manipulated through prompt injection.

Edera's Bounded Authority addresses this problem by separating what an agent is allowed to do from the credentials required to do it. Rather than placing sensitive tokens inside an agent's execution environment, Edera enables platform and security teams to grant narrowly defined capabilities that are enforced outside the workload. This practical implementation of object capabilities is enforced by the hypervisor.

For example, an AI coding agent can be authorized to work within a single GitHub repository without possessing a GitHub token. The OCAP bounded authority also limits the scope of GitHub to a specific set of actions, even if the token has broader access. With these limitations, if the agent is compromised through prompt injection, its permissions remain confined to that repository, with no credential available to steal.

"The problem with giving AI agents autonomy is that we've been giving them authority they don't actually need," said Ariadne Conill, fellow and co-founder of Edera. "An agent might need permission to update one repository or execute one command, but that shouldn't require handing it credentials that open the door to an entire environment. Object capabilities let us separate the action from the authority behind it, so agents can do useful work without becoming a security liability."

Moving Beyond All-or-Nothing Agent Permissions

Existing security tools can isolate workloads, manage secrets, or monitor agent behavior, but they often leave applications holding credentials or operating with permissions broader than their immediate tasks require.

Edera's Agent Runtime combines hardware-isolated execution with object capabilities to give enterprises more precise control over agent behavior, including:

• Credential-free API access: Agents can make authorized API requests through capcurl, while a separate broker retains the underlying credentials.
• Scoped command execution: With capsudo, workloads receive permission to execute specific privileged commands without acquiring standing administrative access.
• Verified workload identity: Integration with SPIFFE/SPIRE enables cryptographically verified workload identities and mutual TLS without requiring long-lived secrets inside the agent.
• Bounded agent autonomy: Integration with Edera's Agent Runtime, is designed to enable reusable, per-tenant sandbox configurations with narrowly defined permissions and auditable agent actions.
• File system capabilities: Granular access controls limit workloads to the files and resources required for their assigned tasks, which prevents an agent from accessing data it shouldn't.

Together, these capabilities are designed to replace the custom credential-handling and permission logic that engineering teams frequently build and maintain themselves.

Securing the Next Generation of AI Infrastructure

The implications extend beyond coding agents to MCP servers, which connect AI models to enterprise tools, commands and APIs. Because these servers frequently operate with access to sensitive credentials and infrastructure, they can become high-value targets for attackers. With object capabilities, organizations can define precisely which commands an MCP server may execute and which external resources it may access, without granting unrestricted access to the underlying systems.

The approach also complements Edera's existing hardware-enforced workload isolation. While isolation limits the damage an exploited workload can cause to neighboring infrastructure, object capabilities restrict the authority that workload can exercise in the first place.

"The future of agent security can't depend on predicting every bad decision an AI system might make," added Conill. "We need infrastructure that assumes agents can be compromised and ensures that even when something goes wrong, their authority remains limited to exactly what they were permitted to do."

Availability

Edera is developing Bounded Authority as part of its broader approach to securing AI agents on Kubernetes. Initial functionality of Edera's Agent Runtime includes scoped command execution and workload identity, with credential-brokered API access and deeper integrations currently under development.

About Edera
Edera is defining the hardened runtime category to help enterprises move fast without breaking things. The company's production-grade sandboxing technology provides true architectural isolation that prevents data breaches at the last line of defense before hardware. By eliminating attack surfaces and stopping threats before they can be attempted, Edera transforms security from a detection-heavy discipline that generates alert fatigue into a prevention-first approach that enables innovation. Learn more at www.edera.dev.

Media Contact
Jennifer Cloer
503-867-2304
jennifer@storychangesculture.com

SOURCE Edera