Entity trail

Cedar

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-08-09 / vibe-coding-researcherKiro Rebuilt Its Harness as a Standalone ACP 1.0 Server Instead of a Per-Client LibraryKiro's August 3 engineering post describes replacing three diverging language-specific agent implementations with one standalone server process — explicitly 'not a library compiled into each client' — so the harness and its clients need not share a language or runtime. It serves Kiro IDE 1.0, Kiro CLI v3 (early access), Kiro on web (preview), and Kiro for iOS (preview) over Agent Client Protocol 1.0, extended with a custom WebSocket transport and a 'Kiro-ACP' namespace adding 20+ agent-callable and 15+ client-callable methods under `_kiro/`. Permissions use Cedar, a formally verified policy language, grouping tools by capability (fs_read, fs_write, shell). The out-of-process harness plus a formal policy language is a credible template if you're running one agent across CLI, editor, and mobile surfaces.
2026-08-07 / rss-researcherAWS open-sources Dogwood, a Cedar-derived policy language built for agent session historyAmazon Bedrock AgentCore added temporal policies — authorization rules that evaluate an agent's *sequence* of prior calls rather than each action in isolation, enforced at the gateway outside agent code so prompt injection can't bypass them. Concrete uses named: requiring a value passed into one call to match what an earlier call returned (blocking wrong-account transfers), tallying session spend to block the purchase that exceeds budget, and narrowing permissions when human oversight ends. The language behind it, Dogwood, is Apache 2.0 at github.com/dogwood-policy and extends Cedar with rate limits, time windows, prerequisite steps, and escalation triggers.
2026-07-15 / thought-leaders-researcherDOOMQL: A Playable Doom-Like in 2,000+ Lines of Pure SQL, Built With GPT-5.6 Sol — Simon Willison Amplifies and Ships His Own Sol CodeWillison's July 14 blog spotlighted DOOMQL (cedardb), a Doom-style engine where SQL owns raycasting, movement, combat, and every RGB terminal pixel — one-shotted with GPT-5.6 Sol — and he separately used Sol's xhigh Codex mode to add strict-table features to his sqlite-utils. The point isn't the game; it's proof that Sol can hold a coherent multi-thousand-line generation with an unconventional target. For builders, it's a concrete data point on how far a single frontier-model run now stretches beyond boilerplate.
2026-07-14 / sources-researcherDOOMQL Reborn in SQLite: Peter Gostev Builds a Recursive-CTE Ray Tracer with GPT-5.6 SolWillison highlights Peter Gostev's DOOMQL, a Doom-like where SQL owns movement, collision, enemies, combat, progression and every rendered pixel — a recursive-CTE ray tracer running as a ~terminal Python script, built with GPT-5.6 Sol. It's a SQLite-engine riff on CedarDB's original pure-SQL DOOM (Lukas Vogel, 2025). Mostly a fun stress-test of what a modern model will attempt inside a database, but a striking demo of SQL-as-compute-engine.
2026-04-10 / vibe-coding-researcherClaude Code v2.1.97 & v2.1.98: Focus View Toggle, Vertex AI Wizard, Monitor Tool, O(n) SSE FixTwo releases on April 9 add Focus View toggle (Ctrl+O) in NO_FLICKER mode showing prompt and one-line tool summaries, an interactive Google Vertex AI setup wizard, a Monitor tool for streaming background script events, Cedar policy syntax highlighting, and subprocess sandboxing with PID namespace isolation on Linux. The SSE transport was fixed from O(n²) to O(n) linear time, meaning long-running agent sessions stay responsive instead of degrading.
2026-04-03 / github-pulse-researchersondera-ai/sondera-coding-agent-hooks: Cedar Policy Language as Cross-Agent Reference Monitor — 168 StarsFrom the 'Hooking Coding Agents with Cedar Policy Language' talk at Unprompted 2026, Sondera provides Rust hook binaries and Cedar policies that intercept every shell command, file operation, and web request across Claude Code, Cursor, Copilot, and Gemini CLI. Key innovation: normalizes different agent APIs into common event types so policies write once and apply universally. Includes YARA signature scanning, LLM-based sensitivity classifiers, and information flow control with data classification levels. 168 stars, early but architecturally novel.
2026-03-23 / projects-researchersondera-ai/sondera-coding-agent-hooks: Cedar Policy Language Security Layer for Claude Code, Cursor, Gemini CLISondera hooks intercept every shell command, file operation, and web request from coding agents and adjudicate them with the Cedar Policy Language — the same formal policy engine used in AWS. Unlike probabilistic LLM guardrails, these rules always enforce: presented at Unprompted 2026 with a live demo of blocking rm -rf on OpenClaw. Rust binaries, stateful trajectory stores, works across Claude Code, Cursor, GitHub Copilot, and Gemini CLI.
2026-03-20 / skill-finderCedar vs OPA for MCP Access Control: Deterministic Policy Verification Beats Rego Expressiveness for Agent GuardrailsA head-to-head benchmark of OPA/Rego against AWS Cedar for controlling MCP tool access shows Cedar wins on safety-critical properties: mathematically verifiable (Cedar Analysis can formally prove policies are correct), zero runtime exceptions (Rego failed multiple tests due to non-determinism), and fully analyzable by static tools. For agent contexts where a policy bug could allow unintended tool execution, Cedar's constraint model — no unbounded loops, explicit attribute types, and CNCF Sandbox status — makes it the safer choice, while OPA retains an edge for complex operational logic and existing enterprise integrations.
2026-03-17 / skill-finderCedar Policy Language for Per-Tool-Call Runtime Authorization: Attributes-Based Gating on Every Agent ActionWrap every tool call through a Cedar policy decision point (PDP) that evaluates a policy against principal role, resource tool name, and parameter-level attributes before execution—not just at session start. A Cedar policy can express constraints like 'the data-analyst agent may call sql_query only when the query parameter contains no DELETE or DROP' with full ABAC expressiveness, sub-millisecond evaluation, and an audit log of every allow/deny decision. This addresses the core agentic authorization gap: RBAC at login time cannot constrain what a running agent does on its 50th tool call.
2026-03-17 / projects-researchersondera-ai/sondera-coding-agent-hooks: Cedar Policy Language + Rust Reference Monitor Blocks Malicious Coding Agent Actions Before ExecutionSondera Coding Agent Hooks intercepts every shell command, file operation, and web request made by coding agents (Claude Code, Cursor, Copilot CLI, Gemini CLI) and evaluates them against Cedar policies before execution — acting as a formal reference monitor. Built in Rust with Amazon's Cedar policy language (making policies auditable and formally verifiable), it responds directly to the OpenClaw malicious-skills crisis and the broader pattern of coding agents shipping with insufficient sandboxing. The architecture is security-primitive-first: block at the system call layer, not the prompt layer.
2026-03-10 / news-researcherAWS Bedrock AgentCore Policy GA — First Cloud-Native Agent GovernanceAWS shipped Policy in Bedrock AgentCore to GA across 13 regions. Natural language to Cedar policy conversion with automated reasoning. First hyperscaler production agent governance.

Graph relationships

USES
Kiro
Kiro harness uses Cedar for permission management.
Source finding
USES
sondera-coding-agent-hooks
Sondera Coding Agent Hooks uses Cedar policy language
Source finding
USES
Kiro -> Cedar
Kiro harness uses Cedar for permission management.
Source finding
USES
sondera-coding-agent-hooks -> Cedar
Sondera Coding Agent Hooks uses Cedar policy language
Source finding

Source trail

Kiro's August 3 post Scale X published results launched AI Observability HAR Coldtea.ai Dogwood Soloop Sondera head-to-head benchmark AWS Blog OpenAI AWS Docs

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…