WEBVTT

1
00:00:04.945 --> 00:00:08.055
<00:00:04.945>Today <00:00:05.085>we <00:00:05.225>are <00:00:05.365>gonna <00:00:05.505>talk <00:00:05.645>about, <00:00:05.785>uh, <00:00:05.925>how <00:00:06.065>to <00:00:06.205>secure, <00:00:06.345>uh,

2
00:00:08.055 --> 00:00:12.375
<00:00:08.055>your <00:00:08.210>AI <00:00:08.366>applications <00:00:08.521>using <00:00:08.677>standard <00:00:08.832>org <00:00:08.988>and <00:00:09.143>open <00:00:09.299>FG, <00:00:09.455>right?

3
00:00:12.775 --> 00:00:15.015
<00:00:12.775>A <00:00:12.930>little <00:00:13.086>with <00:00:13.241>a <00:00:13.397>little <00:00:13.552>bit <00:00:13.708>of <00:00:13.863>AU <00:00:14.019>zero <00:00:14.175>splash.

4
00:00:16.375 --> 00:00:18.435
<00:00:16.375>Uh, <00:00:16.550>a <00:00:16.725>little <00:00:16.900>bit <00:00:17.075>about <00:00:17.250>me. <00:00:17.425>I'm, <00:00:17.600>uh, <00:00:17.775>dpu.

5
00:00:18.455 --> 00:00:21.755
<00:00:18.455>I'm <00:00:18.610>a <00:00:18.766>staff <00:00:18.921>developer <00:00:19.077>dedicated <00:00:19.232>AU <00:00:19.388>zero <00:00:19.543>part <00:00:19.699>of <00:00:19.854>Okta.

6
00:00:22.295 --> 00:00:24.675
<00:00:22.295>I'm <00:00:22.470>a <00:00:22.645>Java <00:00:22.820>champion, <00:00:22.995>uh, <00:00:23.170>huge <00:00:23.345>open <00:00:23.520>source <00:00:23.695>person.

7
00:00:24.675 --> 00:00:26.195
<00:00:24.675>Have <00:00:24.870>built <00:00:25.065>a <00:00:25.261>lot <00:00:25.456>of <00:00:25.652>open <00:00:25.847>source <00:00:26.043>software.

8
00:00:26.445 --> 00:00:28.555
<00:00:26.445>These <00:00:26.678>days <00:00:26.911>I <00:00:27.145>focus <00:00:27.378>mostly <00:00:27.611>on <00:00:27.845>AI

9
00:00:28.795 --> 00:00:29.835
<00:00:28.795>security <00:00:29.029>and <00:00:29.263>stuff <00:00:29.497>like <00:00:29.731>that.

10
00:00:30.495 --> 00:00:33.805
<00:00:30.495>GL <00:00:30.845>developer. <00:00:31.195>Yeah, <00:00:31.545>they're <00:00:31.895>so,

11
00:00:33.945 --> 00:00:35.765
<00:00:33.945>uh, <00:00:34.225>I <00:00:34.505>only <00:00:34.785>have <00:00:35.065>30 <00:00:35.345>minutes.

12
00:00:35.795 --> 00:00:39.125
<00:00:35.795>It's <00:00:35.911>a, <00:00:36.028>a <00:00:36.145>lot <00:00:36.261>of, <00:00:36.378>uh, <00:00:36.495>content <00:00:36.611>to <00:00:36.728>cover, <00:00:36.845>so <00:00:36.961>I'm <00:00:37.078>gonna, <00:00:37.195>uh,

13
00:00:39.505 --> 00:00:40.965
<00:00:39.505>the <00:00:39.692>pace <00:00:39.880>is <00:00:40.068>gonna <00:00:40.255>be <00:00:40.443>a <00:00:40.631>bit <00:00:40.819>fast.

14
00:00:41.865 --> 00:00:44.485
<00:00:41.865>So, <00:00:42.040>uh, <00:00:42.215>the <00:00:42.390>current <00:00:42.565>state <00:00:42.740>of <00:00:42.915>AI <00:00:43.090>security, <00:00:43.265>right?

15
00:00:44.585 --> 00:00:46.885
<00:00:44.585>So <00:00:44.818>AI <00:00:45.051>systems <00:00:45.285>today <00:00:45.518>are <00:00:45.751>like <00:00:45.985>teenagers.

16
00:00:46.885 --> 00:00:48.445
<00:00:46.885>They <00:00:47.059>are <00:00:47.235>great <00:00:47.410>at <00:00:47.585>doing <00:00:47.760>a <00:00:47.934>lot <00:00:48.110>of <00:00:48.285>things,

17
00:00:48.545 --> 00:00:50.365
<00:00:48.545>but <00:00:48.825>with <00:00:49.105>very <00:00:49.385>questionable <00:00:49.665>judgment, <00:00:49.945>right?

18
00:00:50.785 --> 00:00:53.165
<00:00:50.785>And, <00:00:50.959>uh, <00:00:51.135>of <00:00:51.309>course, <00:00:51.485>when <00:00:51.660>AI <00:00:51.834>makes <00:00:52.010>a <00:00:52.184>mistake,

19
00:00:53.165 --> 00:00:55.325
<00:00:53.165>it's <00:00:53.339>not <00:00:53.515>just <00:00:53.690>a, <00:00:53.865>you <00:00:54.040>know, <00:00:54.214>photo <00:00:54.390>on <00:00:54.565>Instagram

20
00:00:55.465 --> 00:00:57.725
<00:00:55.465>or <00:00:55.745>an <00:00:56.025>inappropriate <00:00:56.305>stuff <00:00:56.585>on <00:00:56.865>Instagram.

21
00:00:57.795 --> 00:00:59.405
<00:00:57.795>It's, <00:00:58.028>it <00:00:58.261>could <00:00:58.495>be <00:00:58.728>a <00:00:58.961>company <00:00:59.195>secret.

22
00:00:59.785 --> 00:01:02.165
<00:00:59.785>It <00:00:59.985>could <00:01:00.184>be, <00:01:00.385>you <00:01:00.584>know, <00:01:00.785>uh, <00:01:00.985>customer <00:01:01.184>information.

23
00:01:02.225 --> 00:01:05.805
<00:01:02.225>It <00:01:02.400>could <00:01:02.575>be <00:01:02.750>allowed. <00:01:02.925>So, <00:01:03.100>uh, <00:01:03.275>unlike <00:01:03.450>other <00:01:03.625>domains,

24
00:01:05.805 --> 00:01:08.205
<00:01:05.805>the <00:01:06.005>AI <00:01:06.205>domain <00:01:06.405>is <00:01:06.605>also <00:01:06.805>evolving <00:01:07.005>quite <00:01:07.205>fast.

25
00:01:08.265 --> 00:01:10.045
<00:01:08.265>And, <00:01:08.465>uh, <00:01:08.665>you <00:01:08.865>know <00:01:09.065>how <00:01:09.265>security <00:01:09.465>evolves, <00:01:09.665>right?

26
00:01:10.145 --> 00:01:11.205
<00:01:10.145>It, <00:01:10.383>it's <00:01:10.622>not <00:01:10.860>very <00:01:11.099>fast.

27
00:01:11.505 --> 00:01:14.165
<00:01:11.505>So <00:01:11.645>the <00:01:11.785>security <00:01:11.925>domain <00:01:12.065>is <00:01:12.205>kind <00:01:12.345>of <00:01:12.485>playing <00:01:12.625>a <00:01:12.765>catchup <00:01:12.905>game,

28
00:01:14.585 --> 00:01:17.405
<00:01:14.585>uh, <00:01:14.740>uh, <00:01:14.896>for <00:01:15.051>example, <00:01:15.207>like, <00:01:15.362>uh, <00:01:15.518>look <00:01:15.673>at <00:01:15.829>a <00:01:15.985>agents,

29
00:01:17.405 --> 00:01:19.685
<00:01:17.405>there <00:01:17.638>is <00:01:17.871>still <00:01:18.105>no, <00:01:18.338>uh, <00:01:18.571>proper <00:01:18.805>standards

30
00:01:19.685 --> 00:01:22.245
<00:01:19.685>or <00:01:19.965>standardization <00:01:20.245>on <00:01:20.525>how, <00:01:20.805>uh, <00:01:21.085>uh,

31
00:01:22.345 --> 00:01:24.085
<00:01:22.345>agents <00:01:22.578>can <00:01:22.811>securely <00:01:23.045>talk <00:01:23.278>to <00:01:23.511>each <00:01:23.745>other.

32
00:01:24.265 --> 00:01:26.845
<00:01:24.265>Uh, <00:01:24.615>security, <00:01:24.965>uh, <00:01:25.315>in <00:01:25.665>MCP

33
00:01:26.865 --> 00:01:29.885
<00:01:26.865>or <00:01:27.005>agent <00:01:27.145>to <00:01:27.285>agent <00:01:27.425>protocol <00:01:27.565>is <00:01:27.705>all <00:01:27.845>like <00:01:27.985>coming <00:01:28.125>in <00:01:28.265>later.

34
00:01:30.105 --> 00:01:32.685
<00:01:30.105>You <00:01:30.260>know, <00:01:30.416>the <00:01:30.571>proposals <00:01:30.727>come, <00:01:30.882>uh, <00:01:31.038>the <00:01:31.193>protocols <00:01:31.349>come <00:01:31.505>first.

35
00:01:33.105 --> 00:01:35.725
<00:01:33.104>Uh, <00:01:33.260>the <00:01:33.416>security <00:01:33.571>aspects <00:01:33.727>are <00:01:33.882>like, <00:01:34.038>you <00:01:34.193>know, <00:01:34.349>part <00:01:34.505>two

36
00:01:35.745 --> 00:01:37.005
<00:01:35.745>or <00:01:36.028>something, <00:01:36.312>stuff <00:01:36.595>like <00:01:36.878>that.

37
00:01:37.005 --> 00:01:38.245
<00:01:37.005>You <00:01:37.164>know, <00:01:37.323>uh, <00:01:37.483>how <00:01:37.642>do <00:01:37.802>I <00:01:37.961>know <00:01:38.121>this?

38
00:01:38.525 --> 00:01:40.965
<00:01:38.525>I <00:01:38.680>work <00:01:38.836>for <00:01:38.991>one <00:01:39.147>of <00:01:39.302>the <00:01:39.458>biggest, <00:01:39.613>uh, <00:01:39.769>security <00:01:39.925>companies.

39
00:01:40.985 --> 00:01:43.765
<00:01:40.985>And <00:01:41.140>even <00:01:41.296>for <00:01:41.451>us, <00:01:41.607>it's <00:01:41.762>been <00:01:41.918>a <00:01:42.073>catch <00:01:42.229>up <00:01:42.385>game.

40
00:01:43.765 --> 00:01:44.805
<00:01:43.765>We <00:01:43.952>are <00:01:44.139>trying <00:01:44.326>to <00:01:44.513>keep <00:01:44.701>up,

41
00:01:44.805 --> 00:01:46.165
<00:01:44.805>and <00:01:45.009>we <00:01:45.213>are <00:01:45.417>trying <00:01:45.621>to <00:01:45.824>release <00:01:46.029>features

42
00:01:46.185 --> 00:01:48.365
<00:01:46.185>to <00:01:46.535>address <00:01:46.885>these, <00:01:47.235>uh, <00:01:47.585>shortcomings.

43
00:01:48.365 --> 00:01:51.205
<00:01:48.365>And, <00:01:48.505>you <00:01:48.645>know, <00:01:48.785>we <00:01:48.925>are <00:01:49.065>trying <00:01:49.205>to, <00:01:49.345>uh, <00:01:49.485>uh, <00:01:49.625>uh, <00:01:49.765>uh,

44
00:01:51.205 --> 00:01:54.325
<00:01:51.205>participate <00:01:51.360>in <00:01:51.516>the <00:01:51.671>proposals <00:01:51.827>to, <00:01:51.982>uh, <00:01:52.138>uh, <00:01:52.293>give <00:01:52.449>feedback <00:01:52.605>on,

45
00:01:54.345 --> 00:01:57.125
<00:01:54.345>Hey, <00:01:54.485>this <00:01:54.625>is <00:01:54.765>lacking, <00:01:54.905>you <00:01:55.045>know, <00:01:55.185>this <00:01:55.325>security <00:01:55.465>stuff <00:01:55.605>we <00:01:55.745>need

46
00:01:57.125 --> 00:01:58.245
<00:01:57.125>to <00:01:57.293>handle <00:01:57.461>and <00:01:57.629>this <00:01:57.797>kind <00:01:57.965>of <00:01:58.133>stuff.

47
00:01:58.745 --> 00:02:00.605
<00:01:58.745>So <00:01:58.978>let's <00:01:59.211>see <00:01:59.445>what <00:01:59.678>we <00:01:59.911>have <00:02:00.145>today

48
00:02:00.605 --> 00:02:03.165
<00:02:00.605>and <00:02:00.732>how <00:02:00.859>we <00:02:00.986>can <00:02:01.114>use, <00:02:01.241>uh, <00:02:01.368>standard <00:02:01.495>wall <00:02:01.623>tool <00:02:01.750>for <00:02:01.877>a <00:02:02.005>lot

49
00:02:03.165 --> 00:02:04.965
<00:02:03.165>of <00:02:03.398>things <00:02:03.631>open <00:02:03.865>FGA <00:02:04.098>for <00:02:04.331>some <00:02:04.565>stuff.

50
00:02:05.505 --> 00:02:10.405
<00:02:05.505>So, <00:02:05.645>so <00:02:05.785>according <00:02:05.925>to <00:02:06.065>oasp, <00:02:06.205>uh, <00:02:06.345>these <00:02:06.485>are <00:02:06.625>the <00:02:06.765>top <00:02:06.905>10,

51
00:02:10.505 --> 00:02:12.125
<00:02:10.505>uh, <00:02:11.204>uh, <00:02:11.905>issues.

52
00:02:12.465 --> 00:02:16.485
<00:02:12.465>Uh, <00:02:12.605>you, <00:02:12.745>our <00:02:12.885>top <00:02:13.025>10, <00:02:13.165>uh, <00:02:13.305>uh, <00:02:13.445>uh, <00:02:13.585>security <00:02:13.725>issues, <00:02:13.865>uh,

53
00:02:16.665 --> 00:02:19.285
<00:02:16.665>for <00:02:16.840>LLMA <00:02:17.015>aml, <00:02:17.190>you <00:02:17.364>know, <00:02:17.540>that <00:02:17.715>kind <00:02:17.890>of <00:02:18.065>space.

54
00:02:19.625 --> 00:02:21.725
<00:02:19.625>Uh, <00:02:19.765>of <00:02:19.905>course, <00:02:20.045>you <00:02:20.185>might <00:02:20.325>be <00:02:20.465>familiar <00:02:20.605>with <00:02:20.745>some <00:02:20.885>of <00:02:21.025>them.

55
00:02:21.725 --> 00:02:24.805
<00:02:21.725>Prompt <00:02:21.864>injection. <00:02:22.005>Uh, <00:02:22.144>one <00:02:22.285>of <00:02:22.424>the <00:02:22.565>biggest <00:02:22.704>issues, <00:02:22.845>uh, <00:02:22.984>in, <00:02:23.125>uh,

56
00:02:25.065 --> 00:02:28.405
<00:02:25.065>any <00:02:25.240>AI <00:02:25.415>technology, <00:02:25.590>I <00:02:25.765>mean, <00:02:25.940>especially <00:02:26.115>the <00:02:26.290>generative, <00:02:26.465>uh,

57
00:02:28.545 --> 00:02:31.645
<00:02:28.545>uh, <00:02:28.720>uh, <00:02:28.895>model <00:02:29.070>based <00:02:29.245>AI <00:02:29.420>technologies, <00:02:29.595>you, <00:02:29.770>you <00:02:29.945>know,

58
00:02:31.645 --> 00:02:34.725
<00:02:31.645>you <00:02:31.800>can <00:02:31.956>get <00:02:32.111>your <00:02:32.267>way <00:02:32.422>around <00:02:32.578>by <00:02:32.733>prompt <00:02:32.889>injecting, <00:02:33.045>uh,

59
00:02:34.995 --> 00:02:36.885
<00:02:34.995>then <00:02:35.275>they, <00:02:35.555>we <00:02:35.835>have <00:02:36.115>sensitive <00:02:36.395>information

60
00:02:36.885 --> 00:02:38.405
<00:02:36.885>disclosure <00:02:37.341>at <00:02:37.797>number <00:02:38.253>two.

61
00:02:38.425 --> 00:02:41.085
<00:02:38.425>That's <00:02:38.658>when <00:02:38.891>an <00:02:39.125>AI <00:02:39.358>system <00:02:39.591>leaks <00:02:39.825>information

62
00:02:41.085 --> 00:02:44.405
<00:02:41.085>that <00:02:41.201>it <00:02:41.318>is <00:02:41.435>not <00:02:41.551>supposed <00:02:41.668>to <00:02:41.785>show <00:02:41.901>war <00:02:42.018>is, <00:02:42.135>I <00:02:42.251>know <00:02:42.368>the <00:02:42.485>user.

63
00:02:45.065 --> 00:02:47.445
<00:02:45.065>Uh, <00:02:45.192>we <00:02:45.319>have <00:02:45.446>had <00:02:45.574>a <00:02:45.701>lot <00:02:45.828>of <00:02:45.955>cases <00:02:46.083>of <00:02:46.210>this, <00:02:46.337>uh, <00:02:46.465>recently.

64
00:02:47.625 --> 00:02:50.325
<00:02:47.625>Uh, <00:02:47.780>then <00:02:47.936>there <00:02:48.091>is <00:02:48.247>standard <00:02:48.402>supply <00:02:48.558>chain <00:02:48.713>attack, <00:02:48.869>uh, <00:02:49.025>same

65
00:02:50.325 --> 00:02:51.685
<00:02:50.325>as <00:02:50.631>any <00:02:50.936>other, <00:02:51.243>uh, <00:02:51.549>domain.

66
00:02:52.185 --> 00:02:54.725
<00:02:52.185>We <00:02:52.325>have, <00:02:52.465>uh, <00:02:52.605>data <00:02:52.745>and <00:02:52.885>model <00:02:53.025>poisoning <00:02:53.165>more <00:02:53.305>at <00:02:53.445>the, <00:02:53.585>uh,

67
00:02:55.005 --> 00:02:56.045
<00:02:55.005>training, <00:02:55.317>uh, <00:02:55.629>uh, <00:02:55.941>level.

68
00:02:56.425 --> 00:02:57.885
<00:02:56.425>We <00:02:56.753>have <00:02:57.082>improper <00:02:57.410>output <00:02:57.739>handling.

69
00:02:57.885 --> 00:03:00.485
<00:02:57.885>That's <00:02:58.024>when <00:02:58.165>you <00:02:58.304>take <00:02:58.445>output <00:02:58.584>from <00:02:58.725>an <00:02:58.864>ai, <00:02:59.005>you <00:02:59.144>don't <00:02:59.285>sanitize.

70
00:03:00.485 --> 00:03:02.845
<00:03:00.485>And <00:03:00.612>then, <00:03:00.739>like, <00:03:00.866>you <00:03:00.994>know, <00:03:01.121>try <00:03:01.248>to <00:03:01.375>render <00:03:01.503>HT <00:03:01.630>ML <00:03:01.757>from, <00:03:01.885>uh,

71
00:03:02.845 --> 00:03:04.805
<00:03:02.845>an <00:03:03.078>AI <00:03:03.311>try <00:03:03.545>to <00:03:03.778>render <00:03:04.011>the <00:03:04.245>script

72
00:03:04.805 --> 00:03:06.965
<00:03:04.805>that <00:03:05.005>it <00:03:05.205>gives <00:03:05.405>without <00:03:05.605>sanitization, <00:03:05.805>that <00:03:06.005>kinda <00:03:06.205>stuff.

73
00:03:07.865 --> 00:03:09.525
<00:03:07.865>Uh, <00:03:08.145>then <00:03:08.425>there <00:03:08.705>is <00:03:08.985>excessive <00:03:09.265>agency.

74
00:03:09.525 --> 00:03:13.445
<00:03:09.525>That's <00:03:09.652>when, <00:03:09.779>uh, <00:03:09.906>your <00:03:10.034>a <00:03:10.161>agent <00:03:10.288>has, <00:03:10.415>uh, <00:03:10.543>access <00:03:10.670>to <00:03:10.797>a <00:03:10.925>lot

75
00:03:13.445 --> 00:03:16.245
<00:03:13.445>of <00:03:13.620>stuff <00:03:13.795>without <00:03:13.970>proper <00:03:14.144>scoping, <00:03:14.320>without, <00:03:14.495>uh, <00:03:14.670>you <00:03:14.845>know,

76
00:03:16.245 --> 00:03:19.045
<00:03:16.245>any <00:03:16.445>kind <00:03:16.645>of <00:03:16.845>zero, <00:03:17.045>uh, <00:03:17.245>uh, <00:03:17.445>trust, <00:03:17.645>uh,

77
00:03:19.275 --> 00:03:22.165
<00:03:19.275>when <00:03:19.430>it <00:03:19.586>just <00:03:19.741>have <00:03:19.897>too <00:03:20.052>much, <00:03:20.208>uh, <00:03:20.363>permission <00:03:20.519>or <00:03:20.675>privileges.

78
00:03:22.785 --> 00:03:24.525
<00:03:22.785>Uh, <00:03:23.018>then <00:03:23.251>we <00:03:23.484>have <00:03:23.718>system <00:03:23.951>problem <00:03:24.185>leakage.

79
00:03:24.705 --> 00:03:28.285
<00:03:24.704>Uh, <00:03:24.860>uh, <00:03:25.016>again, <00:03:25.171>more <00:03:25.327>of, <00:03:25.482>uh, <00:03:25.638>uh, <00:03:25.793>you <00:03:25.949>know, <00:03:26.105>infrastructure,

80
00:03:28.545 --> 00:03:30.045
<00:03:28.545>uh, <00:03:28.882>uh, <00:03:29.220>kind <00:03:29.557>of <00:03:29.895>issue.

81
00:03:30.505 --> 00:03:33.085
<00:03:30.505>We <00:03:30.680>have, <00:03:30.855>uh, <00:03:31.030>vector <00:03:31.204>and <00:03:31.380>embedding, <00:03:31.555>uh, <00:03:31.730>uh, <00:03:31.905>weakness.

82
00:03:33.185 --> 00:03:35.445
<00:03:33.185>We <00:03:33.418>have <00:03:33.651>misinformation <00:03:33.885>still <00:03:34.118>a <00:03:34.351>big <00:03:34.585>issue.

83
00:03:35.545 --> 00:03:37.045
<00:03:35.545>We <00:03:35.995>have <00:03:36.445>unbound <00:03:36.895>conception.

84
00:03:37.045 --> 00:03:41.045
<00:03:37.045>That's <00:03:37.185>where, <00:03:37.325>uh, <00:03:37.465>your <00:03:37.605>a <00:03:37.745>agent, <00:03:37.885>uh, <00:03:38.025>uses <00:03:38.165>too <00:03:38.305>much <00:03:38.445>resources.

85
00:03:41.045 --> 00:03:43.725
<00:03:41.045>Could <00:03:41.172>be <00:03:41.299>a <00:03:41.426>monetary, <00:03:41.554>it <00:03:41.681>could <00:03:41.808>be, <00:03:41.935>you <00:03:42.063>know, <00:03:42.190>like, <00:03:42.317>uh, <00:03:42.445>to,

86
00:03:43.825 --> 00:03:44.885
<00:03:43.825>you <00:03:44.143>know, <00:03:44.460>uh, <00:03:44.779>your,

87
00:03:44.885 --> 00:03:46.725
<00:03:44.885>your <00:03:45.165>computational <00:03:45.445>resources, <00:03:45.725>that <00:03:46.005>kinda <00:03:46.285>stuff.

88
00:03:46.735 --> 00:03:50.605
<00:03:46.735>Again, <00:03:46.862>many <00:03:46.989>of <00:03:47.116>these <00:03:47.244>can <00:03:47.371>be, <00:03:47.498>uh, <00:03:47.625>uh, <00:03:47.753>you <00:03:47.880>know, <00:03:48.007>um, <00:03:48.135>used

89
00:03:50.605 --> 00:03:54.805
<00:03:50.605>by <00:03:50.744>hackers <00:03:50.885>to, <00:03:51.024>uh, <00:03:51.165>I <00:03:51.304>dunno, <00:03:51.445>drive <00:03:51.584>your <00:03:51.725>ai, <00:03:51.864>uh, <00:03:52.005>uh,

90
00:03:55.125 --> 00:03:57.045
<00:03:55.125>overload <00:03:55.358>AI <00:03:55.591>agent <00:03:55.825>and <00:03:56.058>stuff <00:03:56.291>like <00:03:56.525>that.

91
00:03:58.495 --> 00:04:01.675
<00:03:58.495>So, <00:03:58.650>out <00:03:58.806>of <00:03:58.961>these, <00:03:59.117>uh, <00:03:59.272>many <00:03:59.428>are <00:03:59.583>not <00:03:59.739>into <00:03:59.895>control

92
00:04:01.675 --> 00:04:04.275
<00:04:01.675>of <00:04:01.830>an <00:04:01.986>app <00:04:02.141>developer <00:04:02.297>unless <00:04:02.452>you <00:04:02.608>are <00:04:02.763>building <00:04:02.919>the <00:04:03.075>AI

93
00:04:04.275 --> 00:04:05.675
<00:04:04.275>systems, <00:04:05.535>right?

94
00:04:05.675 --> 00:04:08.995
<00:04:05.675>Like <00:04:05.802>the <00:04:05.929>models, <00:04:06.056>or, <00:04:06.184>you <00:04:06.311>know, <00:04:06.438>un <00:04:06.565>unless <00:04:06.693>you <00:04:06.820>are <00:04:06.947>open <00:04:07.075>AI

95
00:04:09.015 --> 00:04:10.675
<00:04:09.015>or, <00:04:09.481>uh, <00:04:09.948>anthropic, <00:04:10.415>uh,

96
00:04:10.675 --> 00:04:12.715
<00:04:10.675>you <00:04:10.830>don't <00:04:10.986>have <00:04:11.141>control <00:04:11.297>on <00:04:11.452>a <00:04:11.608>lot <00:04:11.763>of <00:04:11.919>these, <00:04:12.075>right?

97
00:04:13.055 --> 00:04:16.155
<00:04:13.055>So <00:04:13.195>the <00:04:13.335>ones <00:04:13.475>highlighted <00:04:13.615>in <00:04:13.755>red, <00:04:13.895>these <00:04:14.035>are <00:04:14.175>the <00:04:14.315>ones, <00:04:14.455>uh,

98
00:04:16.385 --> 00:04:19.075
<00:04:16.385>that <00:04:16.584>have, <00:04:16.784>uh, <00:04:16.985>that, <00:04:17.185>that, <00:04:17.385>uh, <00:04:17.584>app <00:04:17.784>developer

99
00:04:19.075 --> 00:04:20.195
<00:04:19.075>who <00:04:19.276>is <00:04:19.478>building <00:04:19.679>an <00:04:19.881>AI <00:04:20.082>agent

100
00:04:20.195 --> 00:04:22.155
<00:04:20.195>or <00:04:20.428>an <00:04:20.661>AI <00:04:20.894>application <00:04:21.128>have <00:04:21.361>control <00:04:21.594>over,

101
00:04:22.155 --> 00:04:23.875
<00:04:22.155>like <00:04:22.621>sensitive <00:04:23.088>information <00:04:23.554>disclosure,

102
00:04:23.945 --> 00:04:25.675
<00:04:23.945>something <00:04:24.295>you <00:04:24.645>can <00:04:24.995>control, <00:04:25.344>uh,

103
00:04:25.675 --> 00:04:27.715
<00:04:25.675>improper <00:04:25.908>output <00:04:26.141>handling <00:04:26.375>is <00:04:26.608>you <00:04:26.841>can <00:04:27.075>control.

104
00:04:28.175 --> 00:04:30.355
<00:04:28.175>And <00:04:28.525>out <00:04:28.875>of <00:04:29.225>these, <00:04:29.575>uh,

105
00:04:30.495 --> 00:04:32.395
<00:04:30.495>we <00:04:30.695>are <00:04:30.895>gonna <00:04:31.095>talk <00:04:31.295>about <00:04:31.495>just <00:04:31.695>these <00:04:31.895>two,

106
00:04:32.395 --> 00:04:36.075
<00:04:32.395>because <00:04:32.570>these <00:04:32.745>two <00:04:32.919>have <00:04:33.094>a <00:04:33.270>huge <00:04:33.445>attack <00:04:33.620>surface, <00:04:33.794>right?

107
00:04:36.305 --> 00:04:38.235
<00:04:36.305>Excessive <00:04:36.538>agency <00:04:36.771>covers <00:04:37.005>a <00:04:37.238>lot <00:04:37.471>of <00:04:37.705>things,

108
00:04:38.615 --> 00:04:39.995
<00:04:38.615>and <00:04:38.863>these <00:04:39.111>two <00:04:39.360>are <00:04:39.608>the <00:04:39.857>areas

109
00:04:40.085 --> 00:04:42.835
<00:04:40.085>where <00:04:40.284>it <00:04:40.484>really <00:04:40.685>falls <00:04:40.885>on <00:04:41.085>the <00:04:41.284>app <00:04:41.484>developer.

110
00:04:43.095 --> 00:04:45.995
<00:04:43.095>It, <00:04:43.235>it, <00:04:43.375>it's <00:04:43.515>not <00:04:43.655>more <00:04:43.795>on <00:04:43.935>the, <00:04:44.075>uh, <00:04:44.215>p <00:04:44.355>you <00:04:44.495>know,

111
00:04:46.355 --> 00:04:48.195
<00:04:46.355>companies <00:04:46.555>providing <00:04:46.755>their <00:04:46.955>l <00:04:47.155>LMS <00:04:47.355>or <00:04:47.555>AI <00:04:47.755>systems.

112
00:04:48.195 --> 00:04:51.195
<00:04:48.195>It's <00:04:48.322>more <00:04:48.449>on <00:04:48.576>the <00:04:48.704>app <00:04:48.831>developer <00:04:48.958>to <00:04:49.085>take <00:04:49.213>care <00:04:49.340>of <00:04:49.467>these <00:04:49.594>two.

113
00:04:51.215 --> 00:04:53.195
<00:04:51.215>So <00:04:51.415>we'll <00:04:51.615>be, <00:04:51.815>uh, <00:04:52.015>focusing <00:04:52.215>more <00:04:52.415>on <00:04:52.615>these.

114
00:04:53.735 --> 00:04:56.515
<00:04:53.735>Uh, <00:04:53.875>if <00:04:54.015>there <00:04:54.155>is <00:04:54.295>time, <00:04:54.435>I'll, <00:04:54.575>uh, <00:04:54.715>show <00:04:54.855>some <00:04:54.995>code <00:04:55.135>samples

115
00:04:56.735 --> 00:04:59.035
<00:04:56.735>and, <00:04:56.875>uh, <00:04:57.015>do <00:04:57.155>a <00:04:57.295>demo, <00:04:57.435>but <00:04:57.575>if <00:04:57.715>not, <00:04:57.855>I'm <00:04:57.995>gonna <00:04:58.135>try

116
00:04:59.035 --> 00:05:00.075
<00:04:59.034>to <00:04:59.268>finish <00:04:59.503>the <00:04:59.736>content <00:04:59.971>first.

117
00:05:01.245 --> 00:05:03.025
<00:05:01.245>So, <00:05:01.711>sensitive <00:05:02.178>information <00:05:02.645>disclosure.

118
00:05:03.165 --> 00:05:05.665
<00:05:03.165>So <00:05:03.398>it's, <00:05:03.631>uh, <00:05:03.865>basically <00:05:04.098>sensitive <00:05:04.331>data <00:05:04.565>leakage.

119
00:05:05.665 --> 00:05:08.385
<00:05:05.665>It's <00:05:05.792>a <00:05:05.919>number <00:05:06.046>two <00:05:06.174>as <00:05:06.301>we <00:05:06.428>saw, <00:05:06.555>uh, <00:05:06.683>I <00:05:06.810>know <00:05:06.937>it's <00:05:07.065>like

120
00:05:08.655 --> 00:05:10.425
<00:05:08.655>that <00:05:08.888>one <00:05:09.121>friend <00:05:09.354>who <00:05:09.588>has <00:05:09.821>two <00:05:10.054>drinks

121
00:05:10.445 --> 00:05:12.465
<00:05:10.445>and <00:05:10.678>starts <00:05:10.911>blabbering <00:05:11.145>about <00:05:11.378>all <00:05:11.611>your <00:05:11.844>secrets.

122
00:05:12.465 --> 00:05:13.665
<00:05:12.465>You <00:05:12.825>know, <00:05:13.185>it's, <00:05:13.545>it,

123
00:05:14.165 --> 00:05:16.425
<00:05:14.165>and <00:05:14.305>the <00:05:14.445>risk <00:05:14.585>is <00:05:14.725>even <00:05:14.865>more <00:05:15.005>when <00:05:15.145>you're <00:05:15.285>having <00:05:15.425>some <00:05:15.565>sort

124
00:05:16.425 --> 00:05:18.745
<00:05:16.425>of <00:05:16.658>rack <00:05:16.891>systems, <00:05:17.125>because <00:05:17.358>rack <00:05:17.591>systems, <00:05:17.825>again,

125
00:05:19.165 --> 00:05:20.985
<00:05:19.165>are <00:05:19.398>just <00:05:19.631>a <00:05:19.865>agents <00:05:20.098>with <00:05:20.331>better <00:05:20.565>memory.

126
00:05:21.125 --> 00:05:24.385
<00:05:21.125>So <00:05:21.325>instead <00:05:21.525>of <00:05:21.725>making <00:05:21.925>stuff <00:05:22.125>up <00:05:22.325>as <00:05:22.525>ccs,

127
00:05:24.435 --> 00:05:26.265
<00:05:24.435>it'll <00:05:24.715>take <00:05:24.995>more <00:05:25.275>context, <00:05:25.555>more <00:05:25.835>data,

128
00:05:26.285 --> 00:05:28.265
<00:05:26.285>and <00:05:26.485>then <00:05:26.685>make <00:05:26.885>stuff <00:05:27.085>up <00:05:27.285>based <00:05:27.485>on <00:05:27.685>that.

129
00:05:29.205 --> 00:05:31.025
<00:05:29.205>Uh, <00:05:29.484>so <00:05:29.765>it's <00:05:30.044>great <00:05:30.325>for <00:05:30.604>accuracy,

130
00:05:31.205 --> 00:05:32.505
<00:05:31.205>but, <00:05:31.497>uh, <00:05:31.789>terrible <00:05:32.082>for <00:05:32.375>security

131
00:05:32.505 --> 00:05:34.425
<00:05:32.505>because <00:05:32.645>you <00:05:32.784>have <00:05:32.925>to, <00:05:33.065>uh, <00:05:33.205>you <00:05:33.344>know, <00:05:33.485>feed <00:05:33.625>in <00:05:33.765>a <00:05:33.905>lot

132
00:05:34.425 --> 00:05:35.665
<00:05:34.425>of <00:05:34.704>information <00:05:34.983>to <00:05:35.262>rag <00:05:35.541>systems.

133
00:05:35.815 --> 00:05:39.425
<00:05:35.815>Then <00:05:35.970>how <00:05:36.126>do <00:05:36.281>you <00:05:36.437>make <00:05:36.592>sure <00:05:36.748>it <00:05:36.903>doesn't <00:05:37.059>access <00:05:37.215>data

134
00:05:39.495 --> 00:05:40.905
<00:05:39.495>that <00:05:39.706>the <00:05:39.918>user <00:05:40.129>who <00:05:40.341>is <00:05:40.552>using <00:05:40.763>the

135
00:05:40.905 --> 00:05:42.065
<00:05:40.905>system <00:05:41.113>is <00:05:41.322>not <00:05:41.531>supposed <00:05:41.740>to <00:05:41.949>see?

136
00:05:42.065 --> 00:05:45.625
<00:05:42.065>Right? <00:05:42.220>Uh, <00:05:42.376>I <00:05:42.531>mean, <00:05:42.687>you <00:05:42.842>know, <00:05:42.998>uh, <00:05:43.153>imagine <00:05:43.309>like <00:05:43.465>most

137
00:05:45.625 --> 00:05:48.385
<00:05:45.625>of <00:05:45.825>the <00:05:46.025>RAG <00:05:46.225>implementation <00:05:46.425>these <00:05:46.625>days <00:05:46.825>are, <00:05:47.025>uh,

138
00:05:48.665 --> 00:05:49.705
<00:05:48.665>swimming <00:05:48.977>in <00:05:49.289>sensitive <00:05:49.601>data.

139
00:05:49.775 --> 00:05:53.065
<00:05:49.775>Like, <00:05:50.008>uh, <00:05:50.241>insurance <00:05:50.474>companies, <00:05:50.708>banking <00:05:50.941>systems, <00:05:51.174>your,

140
00:05:53.065 --> 00:05:54.465
<00:05:53.065>your <00:05:53.485>healthcare, <00:05:53.905>uh, <00:05:54.325>systems.

141
00:05:54.885 --> 00:05:57.840
<00:05:54.885>Uh, <00:05:55.040>if <00:05:55.196>you <00:05:55.351>see <00:05:55.507>your <00:05:55.662>insurance <00:05:55.818>company <00:05:55.973>providing <00:05:56.129>a <00:05:56.284>chatbot,

142
00:05:57.840 --> 00:06:00.005
<00:05:57.840>uh, <00:05:58.040>then <00:05:58.240>you <00:05:58.440>be, <00:05:58.640>oh, <00:05:58.840>is <00:05:59.040>the, <00:05:59.240>yeah.

143
00:06:00.065 --> 00:06:02.405
<00:06:00.065>Uh, <00:06:00.205>they, <00:06:00.344>so <00:06:00.485>the <00:06:00.625>chatbot <00:06:00.765>is <00:06:00.905>having <00:06:01.045>access <00:06:01.185>to <00:06:01.325>my <00:06:01.465>data.

144
00:06:02.545 --> 00:06:04.885
<00:06:02.545>Is <00:06:02.700>it <00:06:02.856>secure? <00:06:03.011>Is <00:06:03.167>it <00:06:03.322>going <00:06:03.478>to, <00:06:03.633>is <00:06:03.789>it <00:06:03.945>going

145
00:06:04.885 --> 00:06:06.245
<00:06:04.885>to <00:06:05.089>diverge <00:06:05.293>the <00:06:05.497>data <00:06:05.701>to <00:06:05.905>someone <00:06:06.109>else

146
00:06:06.245 --> 00:06:07.965
<00:06:06.245>because <00:06:06.420>it's <00:06:06.595>going <00:06:06.770>to <00:06:06.945>read <00:06:07.120>the <00:06:07.295>data, <00:06:07.470>it's <00:06:07.645>going

147
00:06:07.965 --> 00:06:10.485
<00:06:07.965>to <00:06:08.120>go <00:06:08.276>into <00:06:08.431>the, <00:06:08.587>its <00:06:08.742>training <00:06:08.898>data, <00:06:09.053>so <00:06:09.209>it's <00:06:09.364>going

148
00:06:10.485 --> 00:06:11.965
<00:06:10.485>to <00:06:10.707>get <00:06:10.929>diverged <00:06:11.151>to <00:06:11.373>someone <00:06:11.594>else, <00:06:11.817>right?

149
00:06:12.065 --> 00:06:13.125
<00:06:12.065>So <00:06:12.255>how <00:06:12.446>do <00:06:12.637>you <00:06:12.828>scope <00:06:13.019>this?

150
00:06:13.125 --> 00:06:15.365
<00:06:13.125>How <00:06:13.280>do <00:06:13.436>you <00:06:13.591>make <00:06:13.747>sure <00:06:13.902>when <00:06:14.058>you <00:06:14.213>implement <00:06:14.369>these <00:06:14.525>kind

151
00:06:15.605 --> 00:06:19.245
<00:06:15.605>of <00:06:15.745>rack <00:06:15.885>systems <00:06:16.025>that <00:06:16.165>you <00:06:16.305>are <00:06:16.445>providing <00:06:16.585>data <00:06:16.725>based <00:06:16.865>on <00:06:17.005>your

152
00:06:19.245 --> 00:06:22.285
<00:06:19.245>permissions <00:06:19.400>and <00:06:19.556>not <00:06:19.711>just <00:06:19.867>feeding, <00:06:20.022>uh, <00:06:20.178>all <00:06:20.333>sort <00:06:20.489>of <00:06:20.645>data?

153
00:06:24.835 --> 00:06:27.615
<00:06:24.835>Uh, <00:06:24.990>and, <00:06:25.146>uh, <00:06:25.301>you <00:06:25.457>know, <00:06:25.612>when <00:06:25.768>these <00:06:25.923>things <00:06:26.079>were, <00:06:26.234>uh,

154
00:06:27.955 --> 00:06:30.135
<00:06:27.955>in <00:06:28.155>early <00:06:28.354>stages, <00:06:28.555>rack <00:06:28.755>systems <00:06:28.955>were <00:06:29.155>getting <00:06:29.354>popular.

155
00:06:30.135 --> 00:06:31.495
<00:06:30.135>Nobody <00:06:30.339>was <00:06:30.543>thinking <00:06:30.747>about <00:06:30.951>any <00:06:31.155>of <00:06:31.359>this.

156
00:06:31.645 --> 00:06:33.415
<00:06:31.645>They <00:06:31.820>were <00:06:31.995>just <00:06:32.169>like, <00:06:32.344>okay, <00:06:32.520>build <00:06:32.695>a <00:06:32.870>rack <00:06:33.044>system,

157
00:06:33.685 --> 00:06:34.695
<00:06:33.685>feed <00:06:33.988>all <00:06:34.291>our <00:06:34.594>data.

158
00:06:35.195 --> 00:06:36.935
<00:06:35.195>Wow, <00:06:35.370>we <00:06:35.545>have <00:06:35.719>an <00:06:35.895>LLM <00:06:36.070>that <00:06:36.245>can <00:06:36.420>answer <00:06:36.594>stuff.

159
00:06:36.935 --> 00:06:38.415
<00:06:36.935>Then <00:06:37.268>they're <00:06:37.601>like, <00:06:37.934>oh, <00:06:38.267>it's,

160
00:06:38.415 --> 00:06:39.935
<00:06:38.415>it's <00:06:38.757>leaking <00:06:39.099>information <00:06:39.441>right <00:06:39.783>there.

161
00:06:40.935 --> 00:06:43.335
<00:06:40.935>Recently, <00:06:41.110>there <00:06:41.285>was <00:06:41.460>like <00:06:41.635>a <00:06:41.810>super <00:06:41.985>base <00:06:42.160>CP <00:06:42.335>server

162
00:06:43.335 --> 00:06:46.295
<00:06:43.335>that <00:06:43.490>was <00:06:43.646>like, <00:06:43.801>oh, <00:06:43.957>it <00:06:44.112>was <00:06:44.268>exposing <00:06:44.423>the <00:06:44.579>entire <00:06:44.734>database,

163
00:06:46.315 --> 00:06:47.535
<00:06:46.315>huh, <00:06:46.589>okay, <00:06:46.864>that's <00:06:47.138>bad, <00:06:47.412>right?

164
00:06:47.795 --> 00:06:50.615
<00:06:47.795>So <00:06:47.950>we <00:06:48.106>need, <00:06:48.261>uh, <00:06:48.417>uh, <00:06:48.572>uh, <00:06:48.728>uh, <00:06:48.883>more <00:06:49.039>control <00:06:49.195>here.

165
00:06:52.175 --> 00:06:55.035
<00:06:52.175>So, <00:06:52.330>uh, <00:06:52.486>how <00:06:52.641>we <00:06:52.797>can <00:06:52.952>prevent <00:06:53.108>this, <00:06:53.263>uh, <00:06:53.419>of <00:06:53.575>course,

166
00:06:55.275 --> 00:06:58.275
<00:06:55.275>standard <00:06:55.554>authorization, <00:06:55.835>uh, <00:06:56.114>how <00:06:56.395>similar <00:06:56.674>to

167
00:06:58.275 --> 00:07:00.555
<00:06:58.275>how <00:06:58.508>we <00:06:58.741>design <00:06:58.974>authorization <00:06:59.208>models <00:06:59.441>for <00:06:59.674>humans.

168
00:07:00.695 --> 00:07:02.475
<00:07:00.695>We <00:07:00.928>also <00:07:01.161>have <00:07:01.395>to <00:07:01.628>design <00:07:01.861>authorization <00:07:02.094>models

169
00:07:02.535 --> 00:07:03.755
<00:07:02.535>for <00:07:02.754>any <00:07:02.974>sort <00:07:03.193>of <00:07:03.413>AI <00:07:03.633>system.

170
00:07:03.935 --> 00:07:06.155
<00:07:03.935>We <00:07:04.110>need <00:07:04.285>to <00:07:04.460>start <00:07:04.635>treating <00:07:04.810>these <00:07:04.985>AI <00:07:05.160>systems <00:07:05.335>similar

171
00:07:06.215 --> 00:07:07.315
<00:07:06.215>to <00:07:06.544>how <00:07:06.875>we <00:07:07.205>start.

172
00:07:07.635 --> 00:07:09.315
<00:07:07.635>I <00:07:07.868>mean, <00:07:08.101>treat <00:07:08.335>humans, <00:07:08.568>don't <00:07:08.801>trust <00:07:09.034>them

173
00:07:09.735 --> 00:07:11.355
<00:07:09.735>by <00:07:10.085>default, <00:07:10.435>never <00:07:10.785>trust <00:07:11.135>them.

174
00:07:12.515 --> 00:07:13.935
<00:07:12.515>Uh, <00:07:13.154>Of <00:07:13.793>course,

175
00:07:13.955 --> 00:07:16.775
<00:07:13.955>we <00:07:14.110>can <00:07:14.266>design <00:07:14.421>a <00:07:14.577>traditional <00:07:14.732>rback <00:07:14.888>systems <00:07:15.043>and <00:07:15.199>have <00:07:15.354>roles

176
00:07:17.035 --> 00:07:18.655
<00:07:17.035>and, <00:07:17.268>you <00:07:17.501>know, <00:07:17.735>uh, <00:07:17.968>permissions <00:07:18.201>in <00:07:18.435>place.

177
00:07:18.755 --> 00:07:20.775
<00:07:18.755>But <00:07:18.955>what's <00:07:19.155>the <00:07:19.355>point <00:07:19.555>of <00:07:19.755>having <00:07:19.955>intelligent <00:07:20.155>systems?

178
00:07:20.835 --> 00:07:23.415
<00:07:20.835>If <00:07:20.962>you <00:07:21.089>are <00:07:21.216>going <00:07:21.344>to <00:07:21.471>apply <00:07:21.598>the <00:07:21.725>same <00:07:21.853>logic <00:07:21.980>that <00:07:22.107>we <00:07:22.234>apply

179
00:07:23.415 --> 00:07:25.615
<00:07:23.415>to <00:07:23.590>humans, <00:07:23.765>we <00:07:23.940>can <00:07:24.115>have <00:07:24.290>go <00:07:24.465>more <00:07:24.640>granular, <00:07:24.815>right?

180
00:07:25.615 --> 00:07:28.415
<00:07:25.615>We <00:07:25.731>can, <00:07:25.848>uh, <00:07:25.965>be <00:07:26.081>more <00:07:26.198>nuanced <00:07:26.315>here. <00:07:26.431>So <00:07:26.548>how <00:07:26.665>can <00:07:26.781>we <00:07:26.898>do <00:07:27.015>that?

181
00:07:29.435 --> 00:07:31.015
<00:07:29.435>Uh, <00:07:29.901>you <00:07:30.368>know, <00:07:30.835>before,

182
00:07:31.195 --> 00:07:34.415
<00:07:31.195>before <00:07:31.302>we <00:07:31.410>talk <00:07:31.518>about <00:07:31.625>how <00:07:31.733>to <00:07:31.841>do <00:07:31.948>that, <00:07:32.056>we <00:07:32.164>need <00:07:32.271>to, <00:07:32.379>uh, <00:07:32.487>see <00:07:32.594>why

183
00:07:34.445 --> 00:07:36.655
<00:07:34.445>that <00:07:34.724>is <00:07:35.005>needed <00:07:35.284>for <00:07:35.565>rack <00:07:35.844>systems.

184
00:07:36.875 --> 00:07:40.015
<00:07:36.875>Uh, <00:07:37.108>specifically, <00:07:37.341>there <00:07:37.575>are <00:07:37.808>certain <00:07:38.041>security <00:07:38.275>challenges.

185
00:07:40.275 --> 00:07:42.175
<00:07:40.275>If <00:07:40.450>you <00:07:40.625>try <00:07:40.799>to <00:07:40.974>do <00:07:41.150>a <00:07:41.325>role <00:07:41.500>based, <00:07:41.674>uh,

186
00:07:42.235 --> 00:07:43.895
<00:07:42.235>or, <00:07:42.515>you <00:07:42.795>know, <00:07:43.075>traditional <00:07:43.355>attribute <00:07:43.635>based

187
00:07:43.895 --> 00:07:45.935
<00:07:43.895>or <00:07:44.094>role <00:07:44.294>based <00:07:44.495>kind <00:07:44.695>of <00:07:44.895>access <00:07:45.094>management <00:07:45.294>system.

188
00:07:46.395 --> 00:07:47.615
<00:07:46.395>One <00:07:46.760>is <00:07:47.127>dynamic <00:07:47.493>context.

189
00:07:47.915 --> 00:07:50.015
<00:07:47.915>So <00:07:48.195>rack <00:07:48.475>systems <00:07:48.755>have <00:07:49.035>dynamic <00:07:49.315>context.

190
00:07:50.045 --> 00:07:53.095
<00:07:50.045>They're <00:07:50.245>going <00:07:50.445>to <00:07:50.645>dynamically <00:07:50.845>read, <00:07:51.045>uh, <00:07:51.245>data, <00:07:51.445>uh,

191
00:07:53.145 --> 00:07:54.175
<00:07:53.145>based <00:07:53.454>on <00:07:53.763>your <00:07:54.072>queries.

192
00:07:54.175 --> 00:07:55.375
<00:07:54.175>They <00:07:54.355>might <00:07:54.535>need <00:07:54.715>different <00:07:54.895>side <00:07:55.075>of <00:07:55.255>data.

193
00:07:55.435 --> 00:07:56.455
<00:07:55.435>So <00:07:55.664>it's, <00:07:55.894>everything <00:07:56.123>is <00:07:56.353>dynamic.

194
00:07:56.605 --> 00:07:58.455
<00:07:56.605>It's <00:07:56.885>not, <00:07:57.165>it's <00:07:57.445>not <00:07:57.725>predetermined, <00:07:58.005>right?

195
00:07:58.795 --> 00:08:00.215
<00:07:58.795>Uh, <00:07:59.433>complex <00:08:00.073>relationships.

196
00:08:00.355 --> 00:08:03.175
<00:08:00.355>So <00:08:00.495>rack <00:08:00.635>systems, <00:08:00.775>again, <00:08:00.915>uh, <00:08:01.055>let's <00:08:01.195>say <00:08:01.335>if <00:08:01.475>you <00:08:01.615>are <00:08:01.755>going

197
00:08:03.175 --> 00:08:06.615
<00:08:03.175>to <00:08:03.330>feed <00:08:03.486>your <00:08:03.641>rack <00:08:03.797>system <00:08:03.952>with <00:08:04.108>your <00:08:04.263>company <00:08:04.419>CMS <00:08:04.575>database,

198
00:08:06.675 --> 00:08:09.535
<00:08:06.675>the <00:08:06.875>data <00:08:07.075>is <00:08:07.275>gonna <00:08:07.475>have <00:08:07.675>very <00:08:07.875>complicated <00:08:08.075>relationship.

199
00:08:09.755 --> 00:08:11.695
<00:08:09.755>It <00:08:09.930>could <00:08:10.105>be <00:08:10.280>organizational, <00:08:10.455>it <00:08:10.630>could <00:08:10.805>be <00:08:10.980>based <00:08:11.155>on

200
00:08:11.695 --> 00:08:13.055
<00:08:11.695>how <00:08:12.103>your <00:08:12.511>companies <00:08:12.919>organize.

201
00:08:13.115 --> 00:08:15.855
<00:08:13.115>So, <00:08:13.395>uh, <00:08:13.675>very <00:08:13.955>complex <00:08:14.235>relationships, <00:08:14.515>again,

202
00:08:15.855 --> 00:08:18.935
<00:08:15.855>doesn't <00:08:15.995>work <00:08:16.135>a <00:08:16.275>scale <00:08:16.415>well, <00:08:16.555>when <00:08:16.695>you, <00:08:16.835>uh, <00:08:16.975>with, <00:08:17.115>uh, <00:08:17.255>uh,

203
00:08:19.295 --> 00:08:21.935
<00:08:19.295>standard <00:08:19.470>R <00:08:19.645>back <00:08:19.820>kind <00:08:19.995>of <00:08:20.170>systems, <00:08:20.345>then <00:08:20.520>granular <00:08:20.695>control,

204
00:08:21.965 --> 00:08:24.975
<00:08:21.965>even <00:08:22.140>within <00:08:22.315>that, <00:08:22.489>uh, <00:08:22.664>you <00:08:22.840>know, <00:08:23.015>complex, <00:08:23.190>uh, <00:08:23.364>uh,

205
00:08:24.975 --> 00:08:27.535
<00:08:24.975>data <00:08:25.175>structure, <00:08:25.375>you <00:08:25.575>might <00:08:25.775>still <00:08:25.975>want <00:08:26.175>granular <00:08:26.375>control.

206
00:08:27.755 --> 00:08:29.215
<00:08:27.755>You, <00:08:28.083>you <00:08:28.412>might <00:08:28.740>have <00:08:29.068>documents,

207
00:08:29.215 --> 00:08:30.535
<00:08:29.215>and <00:08:29.452>you <00:08:29.690>might <00:08:29.927>want <00:08:30.165>AI <00:08:30.403>only

208
00:08:30.535 --> 00:08:32.495
<00:08:30.535>to <00:08:30.735>access <00:08:30.935>certain <00:08:31.135>sections <00:08:31.335>of <00:08:31.535>document, <00:08:31.735>for <00:08:31.935>example.

209
00:08:32.795 --> 00:08:33.935
<00:08:32.794>You <00:08:33.136>might <00:08:33.478>want <00:08:33.820>that.

210
00:08:34.235 --> 00:08:36.455
<00:08:34.235>And <00:08:34.585>performance <00:08:34.935>requirements, <00:08:35.284>again, <00:08:35.635>uh,

211
00:08:36.645 --> 00:08:37.975
<00:08:36.645>with <00:08:36.944>how, <00:08:37.243>uh, <00:08:37.542>this <00:08:37.842>works.

212
00:08:38.075 --> 00:08:39.855
<00:08:38.075>If <00:08:38.355>you're <00:08:38.635>feeding, <00:08:38.915>uh, <00:08:39.195>uh, <00:08:39.475>uh,

213
00:08:39.855 --> 00:08:43.055
<00:08:39.855>dynamic <00:08:39.995>data <00:08:40.135>from <00:08:40.275>a <00:08:40.414>vector <00:08:40.555>database, <00:08:40.695>you <00:08:40.835>need <00:08:40.975>to <00:08:41.115>be <00:08:41.255>able

214
00:08:43.055 --> 00:08:45.135
<00:08:43.054>to <00:08:43.229>do <00:08:43.405>all <00:08:43.579>these <00:08:43.755>checks <00:08:43.929>on <00:08:44.104>the <00:08:44.280>fly, <00:08:44.454>right?

215
00:08:45.195 --> 00:08:47.655
<00:08:45.195>So <00:08:45.428>performance <00:08:45.661>requirements, <00:08:45.895>uh, <00:08:46.128>also <00:08:46.361>comes <00:08:46.595>in

216
00:08:48.315 --> 00:08:52.015
<00:08:48.315>and, <00:08:48.490>uh, <00:08:48.665>this <00:08:48.840>is <00:08:49.015>where <00:08:49.190>I <00:08:49.365>forgot <00:08:49.540>to <00:08:49.715>click.

217
00:08:54.765 --> 00:08:56.285
<00:08:54.765>So <00:08:55.107>this <00:08:55.449>is <00:08:55.790>where <00:08:56.132>relationship-based

218
00:08:56.285 --> 00:08:57.405
<00:08:56.285>access <00:08:56.621>control <00:08:56.957>doesn't <00:08:57.293>work.

219
00:08:57.455 --> 00:09:00.525
<00:08:57.455>Sorry, <00:08:57.688>uh, <00:08:57.921>role-based <00:08:58.155>access <00:08:58.388>control <00:08:58.621>doesn't <00:08:58.855>work,

220
00:09:00.525 --> 00:09:02.885
<00:09:00.525>and <00:09:00.758>we <00:09:00.991>need <00:09:01.225>something <00:09:01.458>called <00:09:01.691>relationship-based <00:09:01.925>access

221
00:09:02.885 --> 00:09:04.925
<00:09:02.885>control <00:09:03.235>or <00:09:03.585>fine-grained <00:09:03.935>access <00:09:04.285>control

222
00:09:04.935 --> 00:09:06.205
<00:09:04.935>model, <00:09:05.125>or <00:09:05.316>is <00:09:05.506>the <00:09:05.697>same <00:09:05.887>thing, <00:09:06.078>right?

223
00:09:06.225 --> 00:09:10.085
<00:09:06.225>Interchangeable. <00:09:06.365>So, <00:09:06.505>uh, <00:09:06.645>FGA, <00:09:06.785>uh, <00:09:06.925>that's <00:09:07.065>how <00:09:07.205>we <00:09:07.345>call <00:09:07.485>it, <00:09:07.625>uh,

224
00:09:10.085 --> 00:09:12.365
<00:09:10.085>fine-grained <00:09:10.318>access, <00:09:10.551>uh, <00:09:10.785>control <00:09:11.018>systems <00:09:11.251>allows <00:09:11.485>you

225
00:09:12.365 --> 00:09:14.405
<00:09:12.365>to <00:09:12.565>control <00:09:12.765>access <00:09:12.965>at <00:09:13.165>a <00:09:13.365>very <00:09:13.565>granular <00:09:13.765>level.

226
00:09:14.545 --> 00:09:17.485
<00:09:14.545>It <00:09:14.661>can <00:09:14.778>be <00:09:14.895>object <00:09:15.011>based, <00:09:15.128>it <00:09:15.245>can <00:09:15.361>be <00:09:15.478>document <00:09:15.594>based, <00:09:15.711>it <00:09:15.828>can <00:09:15.944>be

227
00:09:17.545 --> 00:09:18.685
<00:09:17.545>as <00:09:17.801>granular <00:09:18.058>as <00:09:18.314>you <00:09:18.570>want.

228
00:09:18.705 --> 00:09:22.605
<00:09:18.705>And <00:09:18.880>also <00:09:19.055>this <00:09:19.230>system, <00:09:19.405>FGA <00:09:19.580>is, <00:09:19.755>uh, <00:09:19.930>very <00:09:20.105>flexible.

229
00:09:22.625 --> 00:09:25.285
<00:09:22.625>You <00:09:22.800>can <00:09:22.975>model, <00:09:23.150>uh, <00:09:23.325>traditional, <00:09:23.500>uh, <00:09:23.675>uh, <00:09:23.850>rback <00:09:24.025>systems

230
00:09:25.355 --> 00:09:26.645
<00:09:25.355>with <00:09:25.742>it <00:09:26.129>AAC <00:09:26.516>systems,

231
00:09:26.865 --> 00:09:28.445
<00:09:26.865>and <00:09:27.145>then <00:09:27.425>relationship <00:09:27.705>based <00:09:27.985>access <00:09:28.265>system,

232
00:09:28.445 --> 00:09:29.765
<00:09:28.445>which <00:09:28.614>is <00:09:28.784>the <00:09:28.954>most <00:09:29.123>granular <00:09:29.293>you <00:09:29.463>can <00:09:29.633>go.

233
00:09:30.105 --> 00:09:34.165
<00:09:30.105>So, <00:09:30.245>FGA <00:09:30.385>systems <00:09:30.525>allows <00:09:30.665>you <00:09:30.805>to <00:09:30.945>model <00:09:31.085>very <00:09:31.225>complex, <00:09:31.365>uh, <00:09:31.505>uh,

234
00:09:34.265 --> 00:09:36.605
<00:09:34.265>uh, <00:09:34.545>uh, <00:09:34.824>hierarchies, <00:09:35.105>very <00:09:35.385>complex <00:09:35.665>relationship

235
00:09:36.605 --> 00:09:39.365
<00:09:36.605>between <00:09:36.885>users, <00:09:37.165>groups, <00:09:37.445>documents, <00:09:37.725>or <00:09:38.005>whatever.

236
00:09:39.785 --> 00:09:41.965
<00:09:39.785>Uh, <00:09:39.985>it <00:09:40.185>can <00:09:40.385>ha <00:09:40.584>it <00:09:40.785>can <00:09:40.985>handle <00:09:41.185>hierarchal

237
00:09:41.965 --> 00:09:43.605
<00:09:41.965>and <00:09:42.431>transitive, <00:09:42.898>uh, <00:09:43.365>dependencies.

238
00:09:44.145 --> 00:09:47.485
<00:09:44.145>Uh, <00:09:44.252>it <00:09:44.360>can <00:09:44.468>ha <00:09:44.575>it <00:09:44.683>can <00:09:44.791>scale, <00:09:44.898>uh, <00:09:45.006>very <00:09:45.114>well. <00:09:45.221>It <00:09:45.329>is <00:09:45.437>very <00:09:45.545>fast.

239
00:09:49.255 --> 00:09:53.075
<00:09:49.255>And, <00:09:49.410>uh, <00:09:49.566>one <00:09:49.721>of <00:09:49.877>the, <00:09:50.032>uh, <00:09:50.188>best <00:09:50.343>solutions <00:09:50.499>out <00:09:50.655>there

240
00:09:53.175 --> 00:09:54.715
<00:09:53.175>for <00:09:53.452>this <00:09:53.729>will <00:09:54.006>be <00:09:54.283>open <00:09:54.561>FGA.

241
00:09:54.715 --> 00:09:58.395
<00:09:54.715>So <00:09:54.842>open <00:09:54.969>FGA <00:09:55.096>is <00:09:55.224>an <00:09:55.351>open <00:09:55.478>source, <00:09:55.605>uh, <00:09:55.733>uh, <00:09:55.860>fine-grained, <00:09:55.987>uh, <00:09:56.115>uh,

242
00:09:58.395 --> 00:09:59.875
<00:09:58.395>access <00:09:58.839>control, <00:09:59.283>uh, <00:09:59.727>system.

243
00:10:00.015 --> 00:10:02.395
<00:10:00.015>Uh, <00:10:00.170>it <00:10:00.326>was <00:10:00.481>built <00:10:00.637>by <00:10:00.792>auth <00:10:00.948>zero <00:10:01.103>and <00:10:01.259>open <00:10:01.415>sourced

244
00:10:02.395 --> 00:10:04.315
<00:10:02.395>and <00:10:02.628>donated <00:10:02.861>to <00:10:03.095>the <00:10:03.328>Cloud <00:10:03.561>Native <00:10:03.795>Foundation.

245
00:10:04.735 --> 00:10:07.315
<00:10:04.735>Uh, <00:10:04.890>auth <00:10:05.046>zero <00:10:05.201>provides <00:10:05.357>a <00:10:05.512>hosted <00:10:05.668>version <00:10:05.823>called <00:10:05.979>auth <00:10:06.135>zero

246
00:10:07.395 --> 00:10:10.315
<00:10:07.395>FGA, <00:10:07.522>which <00:10:07.649>is <00:10:07.776>pretty <00:10:07.904>much <00:10:08.031>the <00:10:08.158>same <00:10:08.285>thing <00:10:08.413>with <00:10:08.540>a <00:10:08.667>nicer <00:10:08.795>ui.

247
00:10:11.055 --> 00:10:13.635
<00:10:11.055>Uh, <00:10:11.229>so <00:10:11.405>this <00:10:11.579>is <00:10:11.755>based <00:10:11.930>on <00:10:12.104>Google's <00:10:12.280>Ziba <00:10:12.454>paper.

248
00:10:13.735 --> 00:10:15.555
<00:10:13.735>So <00:10:13.910>it <00:10:14.085>has <00:10:14.260>more <00:10:14.435>or <00:10:14.610>less <00:10:14.785>the <00:10:14.960>same <00:10:15.135>principles.

249
00:10:16.215 --> 00:10:20.575
<00:10:16.215>Uh, <00:10:16.355>it's <00:10:16.495>very <00:10:16.635>scalable. <00:10:16.775>Let's <00:10:16.915>see, <00:10:17.055>uh, <00:10:17.195>uh, <00:10:17.335>what <00:10:17.475>it <00:10:17.615>provides.

250
00:10:21.155 --> 00:10:22.295
<00:10:21.155>So <00:10:21.411>how <00:10:21.668>does <00:10:21.924>it <00:10:22.180>work?

251
00:10:22.395 --> 00:10:25.055
<00:10:22.395>Uh, <00:10:22.550>so <00:10:22.706>the <00:10:22.861>main, <00:10:23.017>uh, <00:10:23.172>the <00:10:23.328>form <00:10:23.483>four <00:10:23.639>main <00:10:23.795>things.

252
00:10:25.155 --> 00:10:28.255
<00:10:25.155>So <00:10:25.329>FGA <00:10:25.505>has <00:10:25.680>a <00:10:25.855>concept <00:10:26.030>called, <00:10:26.204>uh, <00:10:26.380>a <00:10:26.555>store.

253
00:10:28.695 --> 00:10:31.815
<00:10:28.695>A <00:10:28.822>store <00:10:28.949>is <00:10:29.076>a, <00:10:29.204>uh, <00:10:29.331>uh, <00:10:29.458>an <00:10:29.585>entity, <00:10:29.713>entity <00:10:29.840>used <00:10:29.967>to <00:10:30.095>organize,

254
00:10:31.955 --> 00:10:33.335
<00:10:31.955>uh, <00:10:32.576>authorization <00:10:33.197>models.

255
00:10:33.395 --> 00:10:35.615
<00:10:33.395>So <00:10:33.550>you <00:10:33.706>can <00:10:33.861>have <00:10:34.017>multiple <00:10:34.172>stores <00:10:34.328>each <00:10:34.483>having <00:10:34.639>a <00:10:34.795>different

256
00:10:35.725 --> 00:10:36.895
<00:10:35.725>authorization <00:10:36.778>model.

257
00:10:37.565 --> 00:10:39.295
<00:10:37.565>Then <00:10:37.845>we <00:10:38.125>have, <00:10:38.405>uh, <00:10:38.685>authorization <00:10:38.965>models.

258
00:10:39.475 --> 00:10:43.015
<00:10:39.475>So <00:10:39.615>this <00:10:39.755>is <00:10:39.895>the, <00:10:40.035>um, <00:10:40.175>uh, <00:10:40.315>uh, <00:10:40.455>uh, <00:10:40.595>it's <00:10:40.735>a <00:10:40.875>DSL.

259
00:10:43.015 --> 00:10:45.855
<00:10:43.015>Basically <00:10:43.189>it's <00:10:43.365>a <00:10:43.540>DSL <00:10:43.715>that <00:10:43.890>used <00:10:44.064>to <00:10:44.240>define <00:10:44.415>permissions

260
00:10:45.995 --> 00:10:49.175
<00:10:45.995>and <00:10:46.170>model <00:10:46.345>permission <00:10:46.520>systems, <00:10:46.695>like <00:10:46.870>how <00:10:47.045>our <00:10:47.220>permissions <00:10:47.395>model

261
00:10:49.235 --> 00:10:50.695
<00:10:49.235>for <00:10:49.497>this <00:10:49.760>particular <00:10:50.023>set <00:10:50.286>of <00:10:50.549>entities.

262
00:10:51.475 --> 00:10:53.765
<00:10:51.475>Then <00:10:51.708>we <00:10:51.941>have, <00:10:52.175>uh, <00:10:52.408>a <00:10:52.641>relationship <00:10:52.875>triple.

263
00:10:53.825 --> 00:10:55.605
<00:10:53.825>So <00:10:54.025>it's <00:10:54.225>basically <00:10:54.425>a <00:10:54.625>triple <00:10:54.825>or <00:10:55.025>a <00:10:55.225>triplet

264
00:10:55.835 --> 00:10:58.645
<00:10:55.835>that <00:10:56.010>contains <00:10:56.185>a <00:10:56.360>user, <00:10:56.535>an <00:10:56.710>object, <00:10:56.885>and <00:10:57.060>a <00:10:57.235>relation.

265
00:10:58.645 --> 00:11:02.845
<00:10:58.645>So <00:10:58.772>it <00:10:58.899>says <00:10:59.026>user, <00:10:59.154>user <00:10:59.281>A <00:10:59.408>has <00:10:59.535>this <00:10:59.663>relation <00:10:59.790>with <00:10:59.917>this <00:11:00.045>object.

266
00:11:03.195 --> 00:11:05.605
<00:11:03.195>This <00:11:03.395>is <00:11:03.595>how <00:11:03.795>you <00:11:03.995>map, <00:11:04.195>uh, <00:11:04.395>the <00:11:04.595>relationships.

267
00:11:05.955 --> 00:11:07.125
<00:11:05.955>Then <00:11:06.306>there <00:11:06.657>are <00:11:07.008>APIs.

268
00:11:07.345 --> 00:11:08.765
<00:11:07.345>So <00:11:07.664>you <00:11:07.984>have, <00:11:08.303>uh, <00:11:08.623>API

269
00:11:08.785 --> 00:11:11.685
<00:11:08.785>to <00:11:08.940>check <00:11:09.096>if <00:11:09.251>a <00:11:09.407>particular <00:11:09.562>user <00:11:09.718>has <00:11:09.873>a <00:11:10.029>particular <00:11:10.185>relationship

270
00:11:11.685 --> 00:11:12.925
<00:11:11.685>with <00:11:12.056>a <00:11:12.429>particular <00:11:12.800>object.

271
00:11:13.225 --> 00:11:16.725
<00:11:13.225>You <00:11:13.352>can <00:11:13.479>list <00:11:13.606>all, <00:11:13.734>uh, <00:11:13.861>uh, <00:11:13.988>objects <00:11:14.115>that <00:11:14.243>the <00:11:14.370>user <00:11:14.497>has <00:11:14.625>access

272
00:11:16.725 --> 00:11:18.165
<00:11:16.725>to, <00:11:16.984>or <00:11:17.243>list <00:11:17.502>all <00:11:17.761>the <00:11:18.021>users

273
00:11:18.195 --> 00:11:20.605
<00:11:18.195>that <00:11:18.370>an <00:11:18.545>object <00:11:18.720>is <00:11:18.895>assigned <00:11:19.070>to, <00:11:19.245>stuff <00:11:19.420>like <00:11:19.595>that.

274
00:11:20.605 --> 00:11:23.485
<00:11:20.605>So <00:11:20.780>APIs <00:11:20.955>basically, <00:11:21.130>let's <00:11:21.305>see <00:11:21.480>how <00:11:21.655>that <00:11:21.830>will, <00:11:22.005>uh,

275
00:11:23.515 --> 00:11:25.725
<00:11:23.515>look <00:11:23.795>in <00:11:24.074>a, <00:11:24.355>a <00:11:24.635>rack <00:11:24.915>system.

276
00:11:26.555 --> 00:11:28.535
<00:11:26.555>So <00:11:26.755>let's <00:11:26.954>say <00:11:27.155>in <00:11:27.354>a <00:11:27.555>rack <00:11:27.755>system, <00:11:27.954>uh,

277
00:11:28.875 --> 00:11:31.615
<00:11:28.875>you <00:11:29.050>have <00:11:29.225>your <00:11:29.400>vector <00:11:29.575>store, <00:11:29.750>you <00:11:29.925>chunk <00:11:30.100>your <00:11:30.275>documents,

278
00:11:31.615 --> 00:11:33.775
<00:11:31.615>you <00:11:31.848>convert <00:11:32.081>them <00:11:32.315>to <00:11:32.548>embeddings, <00:11:32.781>vector <00:11:33.015>embeddings,

279
00:11:33.875 --> 00:11:35.215
<00:11:33.875>and <00:11:34.047>you <00:11:34.219>put <00:11:34.391>them <00:11:34.564>in <00:11:34.736>your <00:11:34.908>vector <00:11:35.081>store.

280
00:11:35.995 --> 00:11:39.815
<00:11:35.995>Uh, <00:11:36.102>then <00:11:36.210>let's <00:11:36.318>say <00:11:36.425>you <00:11:36.533>have <00:11:36.641>a <00:11:36.748>system <00:11:36.856>where <00:11:36.964>a <00:11:37.071>user <00:11:37.179>goes <00:11:37.287>to <00:11:37.395>a,

281
00:11:39.835 --> 00:11:41.615
<00:11:39.835>uh, <00:11:40.301>rack <00:11:40.768>agent, <00:11:41.235>uh,

282
00:11:41.835 --> 00:11:44.055
<00:11:41.835>the <00:11:42.035>customer <00:11:42.235>is <00:11:42.435>gonna <00:11:42.635>get <00:11:42.835>converted <00:11:43.035>into <00:11:43.235>embedding,

283
00:11:44.275 --> 00:11:45.735
<00:11:44.275>and, <00:11:44.494>uh, <00:11:44.713>you <00:11:44.932>are <00:11:45.151>gonna <00:11:45.370>search <00:11:45.589>for

284
00:11:45.735 --> 00:11:46.935
<00:11:45.735>that <00:11:45.951>embedding <00:11:46.167>from <00:11:46.382>the <00:11:46.598>vector <00:11:46.814>store.

285
00:11:46.955 --> 00:11:50.055
<00:11:46.955>So, <00:11:47.110>standard <00:11:47.266>stuff, <00:11:47.421>all <00:11:47.577>until <00:11:47.732>this <00:11:47.888>all <00:11:48.043>standard <00:11:48.199>stuff <00:11:48.355>vector

286
00:11:50.105 --> 00:11:52.855
<00:11:50.105>store <00:11:50.305>is <00:11:50.505>going <00:11:50.705>to <00:11:50.905>respond <00:11:51.105>with <00:11:51.305>all <00:11:51.505>document

287
00:11:52.855 --> 00:11:54.405
<00:11:52.855>that <00:11:53.203>matches <00:11:53.552>this <00:11:53.901>particular <00:11:54.250>question.

288
00:11:54.505 --> 00:11:57.045
<00:11:54.505>So, <00:11:54.680>in <00:11:54.855>your <00:11:55.030>documents, <00:11:55.205>if <00:11:55.380>the <00:11:55.555>user, <00:11:55.730>uh, <00:11:55.905>says,

289
00:11:57.175 --> 00:12:01.325
<00:11:57.175>gimme <00:11:57.302>financial, <00:11:57.429>uh, <00:11:57.556>uh, <00:11:57.684>report <00:11:57.811>of <00:11:57.938>like <00:11:58.065>X, <00:11:58.193>Y, <00:11:58.320>Z, <00:11:58.447>it's <00:11:58.574>going

290
00:12:01.325 --> 00:12:03.845
<00:12:01.325>to <00:12:01.480>director <00:12:01.636>store <00:12:01.791>is <00:12:01.947>going <00:12:02.102>to <00:12:02.258>give <00:12:02.413>all <00:12:02.569>financial <00:12:02.725>records

291
00:12:04.265 --> 00:12:07.405
<00:12:04.265>of <00:12:04.392>X, <00:12:04.519>Y, <00:12:04.646>Z, <00:12:04.774>regardless <00:12:04.901>of <00:12:05.028>if <00:12:05.155>the <00:12:05.283>user <00:12:05.410>has <00:12:05.537>access <00:12:05.665>to

292
00:12:07.405 --> 00:12:08.605
<00:12:07.405>that <00:12:07.765>information <00:12:08.125>or <00:12:08.485>not.

293
00:12:08.745 --> 00:12:11.525
<00:12:08.745>So <00:12:08.920>it <00:12:09.095>could <00:12:09.270>be, <00:12:09.445>let's <00:12:09.620>say, <00:12:09.795>uh, <00:12:09.970>healthcare <00:12:10.145>information

294
00:12:11.705 --> 00:12:12.725
<00:12:11.705>for <00:12:12.011>some <00:12:12.317>other <00:12:12.623>user.

295
00:12:12.905 --> 00:12:14.885
<00:12:12.905>If <00:12:13.045>you <00:12:13.185>ask, <00:12:13.324>uh, <00:12:13.464>the <00:12:13.605>vector <00:12:13.745>store <00:12:13.885>is <00:12:14.025>gonna <00:12:14.165>give <00:12:14.305>that,

296
00:12:14.885 --> 00:12:16.765
<00:12:14.885>there <00:12:15.118>is <00:12:15.351>no <00:12:15.585>concept <00:12:15.818>of <00:12:16.051>permissions <00:12:16.285>here.

297
00:12:17.035 --> 00:12:19.285
<00:12:17.035>This <00:12:17.209>is <00:12:17.385>where <00:12:17.560>open <00:12:17.735>FGA, <00:12:17.910>uh, <00:12:18.084>gets <00:12:18.260>plugged <00:12:18.435>in.

298
00:12:19.625 --> 00:12:22.765
<00:12:19.625>So <00:12:19.780>the <00:12:19.936>documents <00:12:20.091>doesn't <00:12:20.247>get <00:12:20.402>fed <00:12:20.558>right <00:12:20.713>into <00:12:20.869>LL <00:12:21.025>amities.

299
00:12:22.825 --> 00:12:24.445
<00:12:22.825>You <00:12:23.105>go <00:12:23.385>through <00:12:23.665>an <00:12:23.945>FGA <00:12:24.225>retriever.

300
00:12:24.585 --> 00:12:27.325
<00:12:24.585>So <00:12:24.725>this <00:12:24.865>is <00:12:25.005>a <00:12:25.145>phase <00:12:25.285>where <00:12:25.425>FGA <00:12:25.565>filters <00:12:25.705>out <00:12:25.845>this <00:12:25.985>document.

301
00:12:27.325 --> 00:12:29.565
<00:12:27.325>So <00:12:27.525>you <00:12:27.725>get <00:12:27.925>10 <00:12:28.125>documents <00:12:28.325>as <00:12:28.525>a <00:12:28.725>result.

302
00:12:29.745 --> 00:12:32.725
<00:12:29.745>You <00:12:29.945>feed <00:12:30.145>that <00:12:30.345>to <00:12:30.545>F-G-A-F-G-A <00:12:30.745>checks <00:12:30.945>for, <00:12:31.145>uh,

303
00:12:32.785 --> 00:12:34.485
<00:12:32.785>the <00:12:32.959>permission <00:12:33.135>system <00:12:33.310>that <00:12:33.485>you <00:12:33.660>have <00:12:33.834>put <00:12:34.010>in <00:12:34.185>place

304
00:12:34.485 --> 00:12:35.645
<00:12:34.485>with <00:12:34.833>the <00:12:35.181>FGA <00:12:35.529>database,

305
00:12:35.945 --> 00:12:37.845
<00:12:35.945>and <00:12:36.225>then <00:12:36.505>provides <00:12:36.785>back <00:12:37.065>only <00:12:37.345>the

306
00:12:37.845 --> 00:12:39.285
<00:12:37.845>authorized <00:12:38.169>documents <00:12:38.493>to <00:12:38.817>the <00:12:39.141>LLM.

307
00:12:39.285 --> 00:12:41.605
<00:12:39.285>So <00:12:39.459>in <00:12:39.635>the <00:12:39.810>end, <00:12:39.985>your <00:12:40.160>LLM <00:12:40.334>only <00:12:40.510>gets <00:12:40.685>documents

308
00:12:41.605 --> 00:12:43.605
<00:12:41.605>that <00:12:41.838>the <00:12:42.071>user <00:12:42.305>has <00:12:42.538>permissions <00:12:42.771>to <00:12:43.005>see,

309
00:12:43.705 --> 00:12:45.885
<00:12:43.705>so <00:12:43.860>it <00:12:44.016>doesn't <00:12:44.171>get <00:12:44.327>everything <00:12:44.482>from <00:12:44.638>the, <00:12:44.793>uh, <00:12:44.949>you <00:12:45.105>know,

310
00:12:46.185 --> 00:12:47.365
<00:12:46.185>uh, <00:12:46.539>your <00:12:46.893>vector <00:12:47.247>database.

311
00:12:47.665 --> 00:12:49.765
<00:12:47.665>So <00:12:47.898>that's <00:12:48.131>how, <00:12:48.365>uh, <00:12:48.598>FGA <00:12:48.831>plugs <00:12:49.064>in

312
00:12:49.765 --> 00:12:53.005
<00:12:49.765>and <00:12:49.939>helps <00:12:50.115>to, <00:12:50.290>uh, <00:12:50.465>uh, <00:12:50.640>uh, <00:12:50.814>secure <00:12:50.990>the <00:12:51.165>documents

313
00:12:53.025 --> 00:12:55.765
<00:12:53.025>and <00:12:53.225>access, <00:12:53.425>uh, <00:12:53.625>code <00:12:53.824>wise, <00:12:54.025>this <00:12:54.225>is <00:12:54.425>how,

314
00:12:55.865 --> 00:12:57.085
<00:12:55.865>uh, <00:12:56.084>it, <00:12:56.304>uh, <00:12:56.523>it <00:12:56.743>would <00:12:56.963>look.

315
00:12:57.105 --> 00:12:59.205
<00:12:57.105>So <00:12:57.260>this <00:12:57.416>is <00:12:57.571>a <00:12:57.727>model. <00:12:57.882>So <00:12:58.038>this <00:12:58.193>is <00:12:58.349>a <00:12:58.505>model.

316
00:12:59.425 --> 00:13:02.525
<00:12:59.425>Uh, <00:12:59.599>for <00:12:59.775>example, <00:12:59.949>this <00:13:00.125>one <00:13:00.300>defines, <00:13:00.474>uh, <00:13:00.650>uh, <00:13:00.824>relationship

317
00:13:02.525 --> 00:13:03.565
<00:13:02.525>between, <00:13:02.993>uh, <00:13:03.461>documents

318
00:13:03.565 --> 00:13:05.685
<00:13:03.565>and <00:13:03.765>users, <00:13:03.965>um, <00:13:04.165>let's <00:13:04.365>say <00:13:04.565>in <00:13:04.765>a <00:13:04.965>company.

319
00:13:06.505 --> 00:13:09.485
<00:13:06.505>Um, <00:13:06.738>so <00:13:06.971>the, <00:13:07.205>you <00:13:07.438>know, <00:13:07.671>standard <00:13:07.905>stuff,

320
00:13:09.485 --> 00:13:11.805
<00:13:09.485>like <00:13:09.660>you <00:13:09.835>got <00:13:10.010>viewer <00:13:10.185>comment <00:13:10.360>editor, <00:13:10.535>like, <00:13:10.710>you <00:13:10.885>know,

321
00:13:11.805 --> 00:13:13.285
<00:13:11.805>Google <00:13:12.071>Drive <00:13:12.337>kind <00:13:12.604>of <00:13:12.870>permissions, <00:13:13.137>right?

322
00:13:13.905 --> 00:13:17.365
<00:13:13.905>And <00:13:14.105>then <00:13:14.305>you <00:13:14.505>define, <00:13:14.704>uh, <00:13:14.905>relationships <00:13:15.105>like <00:13:15.305>this.

323
00:13:17.625 --> 00:13:20.045
<00:13:17.625>Uh, <00:13:17.905>you <00:13:18.185>define <00:13:18.465>relationships <00:13:18.745>like <00:13:19.025>that.

324
00:13:20.045 --> 00:13:23.205
<00:13:20.045>So <00:13:20.172>user <00:13:20.299>can <00:13:20.426>be <00:13:20.554>an <00:13:20.681>editor <00:13:20.808>on, <00:13:20.935>uh, <00:13:21.063>new <00:13:21.190>document <00:13:21.317>called, <00:13:21.444>uh,

325
00:13:23.285 --> 00:13:25.125
<00:13:23.285>a <00:13:23.564>document <00:13:23.844>called <00:13:24.125>New <00:13:24.405>Road <00:13:24.685>Roadmap.

326
00:13:25.425 --> 00:13:27.725
<00:13:25.425>So <00:13:25.775>the <00:13:26.125>relationship <00:13:26.474>definitions <00:13:26.824>are

327
00:13:27.725 --> 00:13:28.845
<00:13:27.725>going <00:13:27.977>to <00:13:28.229>be <00:13:28.481>very <00:13:28.733>granular.

328
00:13:29.065 --> 00:13:30.685
<00:13:29.065>So <00:13:29.345>you <00:13:29.625>have, <00:13:29.905>you, <00:13:30.185>uh, <00:13:30.465>again,

329
00:13:30.705 --> 00:13:32.165
<00:13:30.705>you <00:13:30.892>won't <00:13:31.080>be <00:13:31.268>doing <00:13:31.455>all <00:13:31.643>this <00:13:31.831>by <00:13:32.019>hand.

330
00:13:32.165 --> 00:13:34.485
<00:13:32.165>There'll <00:13:32.320>be <00:13:32.476>systems. <00:13:32.631>So <00:13:32.787>when <00:13:32.942>a <00:13:33.098>new <00:13:33.253>document <00:13:33.409>gets <00:13:33.564>created,

331
00:13:34.485 --> 00:13:37.125
<00:13:34.485>you'll <00:13:34.685>automatically <00:13:34.885>add <00:13:35.085>a <00:13:35.285>relationship <00:13:35.485>based <00:13:35.685>on <00:13:35.885>let's,

332
00:13:37.125 --> 00:13:38.725
<00:13:37.125>okay, <00:13:37.405>user, <00:13:37.685>I <00:13:37.965>created <00:13:38.245>the <00:13:38.525>document.

333
00:13:38.725 --> 00:13:39.765
<00:13:38.725>So <00:13:38.959>they <00:13:39.193>get <00:13:39.427>this <00:13:39.661>permission.

334
00:13:39.765 --> 00:13:41.005
<00:13:39.765>Then <00:13:39.924>if <00:13:40.083>they <00:13:40.243>share <00:13:40.402>the <00:13:40.562>document <00:13:40.721>with <00:13:40.881>someone,

335
00:13:41.305 --> 00:13:42.645
<00:13:41.305>you <00:13:41.506>add <00:13:41.707>in <00:13:41.908>the <00:13:42.108>permission <00:13:42.310>for <00:13:42.511>that.

336
00:13:42.705 --> 00:13:45.725
<00:13:42.705>So <00:13:42.860>it's <00:13:43.016>the, <00:13:43.171>the <00:13:43.327>permission <00:13:43.482>system <00:13:43.638>gets <00:13:43.793>built <00:13:43.949>up <00:13:44.105>gradually

337
00:13:45.945 --> 00:13:48.445
<00:13:45.945>as <00:13:46.120>you <00:13:46.295>create <00:13:46.470>documents <00:13:46.645>and <00:13:46.820>as <00:13:46.995>your <00:13:47.170>system <00:13:47.345>evolves.

338
00:13:50.485 --> 00:13:53.735
<00:13:50.485>So <00:13:50.685>This <00:13:50.885>is <00:13:51.085>how <00:13:51.285>it'll <00:13:51.485>look <00:13:51.685>like, <00:13:51.885>uh,

339
00:13:53.995 --> 00:13:55.535
<00:13:53.995>in <00:13:54.272>an <00:13:54.549>agent <00:13:54.826>tool, <00:13:55.103>for <00:13:55.381>example.

340
00:13:55.595 --> 00:13:57.015
<00:13:55.595>So <00:13:55.808>this <00:13:56.021>is <00:13:56.234>a <00:13:56.447>virtual <00:13:56.660>AI <00:13:56.873>tool.

341
00:13:57.075 --> 00:14:00.575
<00:13:57.075>So <00:13:57.191>you <00:13:57.308>have <00:13:57.425>a <00:13:57.541>virtual <00:13:57.658>AI <00:13:57.775>tool, <00:13:57.891>uh, <00:13:58.008>that, <00:13:58.125>uh, <00:13:58.241>you <00:13:58.358>know, <00:13:58.475>uh,

342
00:14:00.665 --> 00:14:03.455
<00:14:00.665>fetes <00:14:00.805>some <00:14:00.944>documents <00:14:01.084>and, <00:14:01.224>uh, <00:14:01.365>provides <00:14:01.505>it <00:14:01.645>as <00:14:01.785>context <00:14:01.925>to <00:14:02.064>the,

343
00:14:03.675 --> 00:14:05.255
<00:14:03.675>uh, <00:14:04.375>uh, <00:14:05.074>agent.

344
00:14:05.595 --> 00:14:06.695
<00:14:05.595>And <00:14:05.793>you <00:14:05.991>plug <00:14:06.189>it <00:14:06.387>in <00:14:06.585>here.

345
00:14:06.715 --> 00:14:09.015
<00:14:06.715>So <00:14:06.915>we <00:14:07.115>provide <00:14:07.315>some, <00:14:07.515>uh, <00:14:07.715>SDKs, <00:14:07.915>for <00:14:08.115>example.

346
00:14:09.035 --> 00:14:11.575
<00:14:09.035>So <00:14:09.190>use, <00:14:09.346>use <00:14:09.501>the <00:14:09.657>SDKs, <00:14:09.812>and <00:14:09.968>you <00:14:10.123>build <00:14:10.279>a <00:14:10.435>query

347
00:14:11.635 --> 00:14:14.535
<00:14:11.635>and <00:14:11.790>you <00:14:11.946>say, <00:14:12.101>only <00:14:12.257>if <00:14:12.412>these, <00:14:12.568>uh, <00:14:12.723>queries <00:14:12.879>are <00:14:13.035>matching,

348
00:14:14.685 --> 00:14:16.935
<00:14:14.685>then <00:14:14.885>you <00:14:15.084>provide <00:14:15.285>the <00:14:15.484>document <00:14:15.685>to <00:14:15.885>the <00:14:16.084>LLM.

349
00:14:16.935 --> 00:14:18.655
<00:14:16.935>So <00:14:17.135>that's <00:14:17.334>how <00:14:17.535>you <00:14:17.734>integrate <00:14:17.935>into <00:14:18.135>a <00:14:18.334>two.

350
00:14:19.475 --> 00:14:23.815
<00:14:19.475>So <00:14:20.875>Let's,

351
00:14:23.815 --> 00:14:24.855
<00:14:23.815>uh, <00:14:23.971>move <00:14:24.127>on <00:14:24.283>to <00:14:24.439>the <00:14:24.595>next <00:14:24.751>thing.

352
00:14:24.975 --> 00:14:27.895
<00:14:24.975>I <00:14:25.102>think, <00:14:25.229>um, <00:14:25.356>oh, <00:14:25.484>I <00:14:25.611>need <00:14:25.738>to <00:14:25.865>go <00:14:25.993>a <00:14:26.120>bit <00:14:26.247>more <00:14:26.375>faster.

353
00:14:28.395 --> 00:14:31.615
<00:14:28.395>So <00:14:28.569>another <00:14:28.745>major <00:14:28.920>issue <00:14:29.095>playing <00:14:29.270>a <00:14:29.444>plaguing <00:14:29.620>agent, <00:14:29.795>uh,

354
00:14:32.065 --> 00:14:33.575
<00:14:32.065>agent <00:14:32.404>systems <00:14:32.744>or <00:14:33.084>AI <00:14:33.424>systems

355
00:14:33.575 --> 00:14:34.695
<00:14:33.575>or <00:14:33.911>excessive <00:14:34.247>agency, <00:14:34.583>though,

356
00:14:34.695 --> 00:14:37.215
<00:14:34.695>when <00:14:34.870>your <00:14:35.045>agent <00:14:35.220>has <00:14:35.395>more <00:14:35.570>scopes <00:14:35.745>than <00:14:35.920>it <00:14:36.095>should.

357
00:14:37.635 --> 00:14:39.895
<00:14:37.635>So <00:14:37.835>the <00:14:38.035>security <00:14:38.235>challenges <00:14:38.435>in <00:14:38.635>this <00:14:38.835>space, <00:14:39.035>uh,

358
00:14:40.195 --> 00:14:41.415
<00:14:40.195>one <00:14:40.561>is <00:14:40.927>tool <00:14:41.293>access.

359
00:14:41.515 --> 00:14:44.095
<00:14:41.515>How <00:14:41.689>do <00:14:41.865>we <00:14:42.040>control <00:14:42.215>what <00:14:42.390>tools <00:14:42.564>agent <00:14:42.740>can <00:14:42.915>access?

360
00:14:44.635 --> 00:14:45.695
<00:14:44.635>Uh, <00:14:44.873>how <00:14:45.112>do <00:14:45.350>we <00:14:45.589>control

361
00:14:45.695 --> 00:14:49.095
<00:14:45.695>what <00:14:45.835>APIs <00:14:45.975>the <00:14:46.115>agents <00:14:46.255>can <00:14:46.395>agent <00:14:46.535>can <00:14:46.675>access, <00:14:46.815>mostly <00:14:46.955>from <00:14:47.095>tools

362
00:14:49.635 --> 00:14:52.445
<00:14:49.635>and <00:14:49.810>how <00:14:49.985>to, <00:14:50.160>uh, <00:14:50.335>have <00:14:50.510>humans <00:14:50.685>in <00:14:50.860>the <00:14:51.035>loop

363
00:14:52.445 --> 00:14:53.445
<00:14:52.445>for <00:14:52.895>sensitive <00:14:53.345>actions.

364
00:14:53.515 --> 00:14:55.525
<00:14:53.515>Like <00:14:53.715>if <00:14:53.915>you <00:14:54.115>have <00:14:54.314>a <00:14:54.515>stock <00:14:54.715>buying <00:14:54.915>agent,

365
00:14:55.705 --> 00:14:57.205
<00:14:55.705>how <00:14:55.930>do <00:14:56.155>we <00:14:56.380>get <00:14:56.605>approvals <00:14:56.830>from <00:14:57.055>humans

366
00:14:57.205 --> 00:14:59.205
<00:14:57.205>before <00:14:57.438>it <00:14:57.671>clicks, <00:14:57.905>buy <00:14:58.138>stuff <00:14:58.371>like <00:14:58.605>that.

367
00:15:00.225 --> 00:15:04.425
<00:15:00.225>Uh, <00:15:00.341>so <00:15:00.458>let's <00:15:00.575>see <00:15:00.691>how <00:15:00.808>we <00:15:00.925>can, <00:15:01.041>uh, <00:15:01.158>handle <00:15:01.275>each <00:15:01.391>of <00:15:01.508>this <00:15:01.625>tool.

368
00:15:04.425 --> 00:15:05.465
<00:15:04.425>Access <00:15:04.737>is <00:15:05.049>quite <00:15:05.361>straightforward.

369
00:15:05.525 --> 00:15:07.105
<00:15:05.525>We <00:15:05.805>already <00:15:06.084>have, <00:15:06.365>uh, <00:15:06.645>uh, <00:15:06.925>uh,

370
00:15:07.125 --> 00:15:08.385
<00:15:07.125>you <00:15:07.314>know, <00:15:07.503>stuff <00:15:07.692>in <00:15:07.881>place <00:15:08.069>for <00:15:08.259>that.

371
00:15:08.405 --> 00:15:11.705
<00:15:08.405>For <00:15:08.605>example, <00:15:08.805>go <00:15:09.005>with <00:15:09.204>the <00:15:09.405>zero <00:15:09.605>trust, <00:15:09.805>uh,

372
00:15:12.105 --> 00:15:13.265
<00:15:12.105>authorizations <00:15:12.366>for <00:15:12.627>tool <00:15:12.888>access, <00:15:13.149>right?

373
00:15:13.645 --> 00:15:15.505
<00:15:13.645>For <00:15:13.995>example, <00:15:14.345>uh, <00:15:14.694>with <00:15:15.045>rback.

374
00:15:15.505 --> 00:15:19.985
<00:15:15.505>So <00:15:15.645>you <00:15:15.785>can <00:15:15.925>have <00:15:16.064>a, <00:15:16.205>a <00:15:16.345>system <00:15:16.485>where <00:15:16.625>you <00:15:16.765>get <00:15:16.905>your,

375
00:15:20.445 --> 00:15:22.705
<00:15:20.445>you <00:15:20.620>probably <00:15:20.795>already <00:15:20.970>have <00:15:21.145>an <00:15:21.320>authentication <00:15:21.495>system <00:15:21.670>in <00:15:21.845>place.

376
00:15:22.845 --> 00:15:24.945
<00:15:22.845>You <00:15:23.020>get <00:15:23.195>the <00:15:23.370>user <00:15:23.545>from <00:15:23.720>your <00:15:23.895>authentication <00:15:24.070>system <00:15:24.245>check

377
00:15:24.945 --> 00:15:27.625
<00:15:24.945>for <00:15:25.145>standard <00:15:25.345>roles, <00:15:25.545>and, <00:15:25.745>uh, <00:15:25.945>you <00:15:26.145>know, <00:15:26.345>uh,

378
00:15:27.815 --> 00:15:28.825
<00:15:27.815>provide <00:15:28.269>tool <00:15:28.724>access.

379
00:15:28.825 --> 00:15:31.625
<00:15:28.825>So <00:15:28.980>you <00:15:29.136>can <00:15:29.291>bake <00:15:29.447>this <00:15:29.602>right <00:15:29.758>into <00:15:29.913>your <00:15:30.069>tools <00:15:30.225>so

380
00:15:31.625 --> 00:15:34.305
<00:15:31.625>that <00:15:31.765>your <00:15:31.905>agents, <00:15:32.045>uh, <00:15:32.185>uh, <00:15:32.325>so <00:15:32.465>this <00:15:32.605>is <00:15:32.745>the <00:15:32.885>right <00:15:33.025>approach.

381
00:15:34.495 --> 00:15:36.705
<00:15:34.495>Your <00:15:34.695>AI <00:15:34.895>system <00:15:35.095>or <00:15:35.295>your <00:15:35.495>LLM <00:15:35.695>shouldn't <00:15:35.895>have

382
00:15:36.705 --> 00:15:37.785
<00:15:36.705>any <00:15:36.899>control <00:15:37.093>on <00:15:37.288>any <00:15:37.482>of <00:15:37.677>this.

383
00:15:37.785 --> 00:15:38.945
<00:15:37.785>This <00:15:37.993>should <00:15:38.202>be <00:15:38.411>at <00:15:38.620>code <00:15:38.829>level.

384
00:15:39.165 --> 00:15:41.825
<00:15:39.165>You <00:15:39.320>should <00:15:39.476>be <00:15:39.631>the <00:15:39.787>one <00:15:39.942>controlling, <00:15:40.098>uh, <00:15:40.253>you <00:15:40.409>know, <00:15:40.564>uh,

385
00:15:41.825 --> 00:15:44.385
<00:15:41.825>what <00:15:42.058>gets <00:15:42.291>called, <00:15:42.525>what <00:15:42.758>gets, <00:15:42.991>uh, <00:15:43.225>uh,

386
00:15:44.385 --> 00:15:45.505
<00:15:44.385>what <00:15:44.586>has <00:15:44.788>access <00:15:44.989>and <00:15:45.191>all <00:15:45.393>this.

387
00:15:45.505 --> 00:15:47.865
<00:15:45.505>And <00:15:45.680>the <00:15:45.855>LLM <00:15:46.030>should <00:15:46.205>only <00:15:46.380>be <00:15:46.555>calling <00:15:46.730>the <00:15:46.905>tool,

388
00:15:48.085 --> 00:15:50.865
<00:15:48.085>and <00:15:48.212>then <00:15:48.339>you <00:15:48.466>decide <00:15:48.594>if <00:15:48.721>it, <00:15:48.848>the <00:15:48.975>tool <00:15:49.103>should <00:15:49.230>run <00:15:49.357>or <00:15:49.485>not.

389
00:15:51.525 --> 00:15:54.185
<00:15:51.525>So <00:15:51.665>the <00:15:51.805>LLM <00:15:51.944>doesn't <00:15:52.084>have <00:15:52.225>any <00:15:52.365>control. <00:15:52.505>So <00:15:52.645>zero <00:15:52.785>trust <00:15:52.925>again.

390
00:15:54.245 --> 00:15:55.745
<00:15:54.245>So <00:15:54.470>this <00:15:54.695>can <00:15:54.920>be <00:15:55.145>standard <00:15:55.370>R <00:15:55.595>back.

391
00:15:55.745 --> 00:15:58.665
<00:15:55.745>And <00:15:55.861>if <00:15:55.978>you <00:15:56.095>have <00:15:56.211>more <00:15:56.328>complex <00:15:56.445>use <00:15:56.561>cases, <00:15:56.678>you <00:15:56.795>can <00:15:56.911>do <00:15:57.028>the <00:15:57.145>same

392
00:15:58.665 --> 00:16:02.585
<00:15:58.665>with, <00:15:58.781>uh, <00:15:58.898>FGA, <00:15:59.015>for <00:15:59.131>example, <00:15:59.248>uh, <00:15:59.365>if <00:15:59.481>you <00:15:59.598>have <00:15:59.714>a, <00:15:59.831>a <00:15:59.948>tool <00:16:00.064>where,

393
00:16:03.165 --> 00:16:06.825
<00:16:03.165>uh, <00:16:03.320>the <00:16:03.476>access, <00:16:03.631>uh, <00:16:03.787>everyone <00:16:03.942>has <00:16:04.098>to <00:16:04.253>have <00:16:04.409>tool <00:16:04.564>access,

394
00:16:06.845 --> 00:16:09.265
<00:16:06.845>but <00:16:06.972>what <00:16:07.099>you <00:16:07.226>can <00:16:07.354>do <00:16:07.481>within <00:16:07.608>the <00:16:07.735>tool <00:16:07.863>depends <00:16:07.990>on <00:16:08.117>the <00:16:08.245>user,

395
00:16:09.265 --> 00:16:12.105
<00:16:09.265>then <00:16:09.392>you <00:16:09.519>can <00:16:09.646>use <00:16:09.774>the <00:16:09.901>FGA <00:16:10.028>for <00:16:10.155>that <00:16:10.283>kind <00:16:10.410>of <00:16:10.537>granular <00:16:10.665>stuff.

396
00:16:12.125 --> 00:16:14.665
<00:16:12.125>You <00:16:12.325>can <00:16:12.525>define, <00:16:12.725>uh, <00:16:12.925>again, <00:16:13.125>queries <00:16:13.325>for <00:16:13.525>that.

397
00:16:14.765 --> 00:16:18.065
<00:16:14.765>So <00:16:14.920>only <00:16:15.076>certain <00:16:15.231>people <00:16:15.387>can <00:16:15.542>buy <00:16:15.698>certain <00:16:15.853>tickers, <00:16:16.009>for <00:16:16.165>example.

398
00:16:18.245 --> 00:16:19.785
<00:16:18.245>So <00:16:18.476>only <00:16:18.707>certain <00:16:18.938>users <00:16:19.169>can <00:16:19.400>buy <00:16:19.631>Google,

399
00:16:19.805 --> 00:16:21.505
<00:16:19.805>or <00:16:20.084>certain <00:16:20.364>users <00:16:20.645>can <00:16:20.925>buy <00:16:21.204>Microsoft.

400
00:16:21.505 --> 00:16:24.505
<00:16:21.505>You <00:16:21.680>can <00:16:21.855>define <00:16:22.030>that <00:16:22.205>level <00:16:22.380>of <00:16:22.555>authorization, <00:16:22.730>then <00:16:22.905>bake

401
00:16:24.505 --> 00:16:27.785
<00:16:24.505>that <00:16:24.645>into <00:16:24.785>your, <00:16:24.925>uh, <00:16:25.064>tools <00:16:25.205>and <00:16:25.345>let <00:16:25.485>the <00:16:25.625>tool, <00:16:25.765>uh, <00:16:25.905>fail

402
00:16:27.845 --> 00:16:29.585
<00:16:27.845>or <00:16:28.045>pass, <00:16:28.245>uh, <00:16:28.445>you <00:16:28.645>know, <00:16:28.845>uh, <00:16:29.045>uh, <00:16:29.245>uh,

403
00:16:29.585 --> 00:16:32.305
<00:16:29.585>running <00:16:29.865>based <00:16:30.145>on <00:16:30.425>the <00:16:30.705>FGA <00:16:30.985>authorizations

404
00:16:33.705 --> 00:16:34.805
<00:16:33.705>and <00:16:34.200>calling <00:16:34.694>APIs.

405
00:16:34.905 --> 00:16:37.405
<00:16:34.905>Uh, <00:16:35.105>when <00:16:35.305>calling <00:16:35.505>your <00:16:35.704>own <00:16:35.905>APIs, <00:16:36.105>again, <00:16:36.305>standard

406
00:16:37.625 --> 00:16:39.325
<00:16:37.625>or <00:16:37.825>two <00:16:38.025>is <00:16:38.225>more <00:16:38.425>than <00:16:38.625>sufficient <00:16:38.825>for <00:16:39.025>that.

407
00:16:39.625 --> 00:16:41.245
<00:16:39.625>You <00:16:39.905>get <00:16:40.185>your, <00:16:40.465>uh, <00:16:40.745>access <00:16:41.025>token

408
00:16:41.245 --> 00:16:43.605
<00:16:41.245>and <00:16:41.420>you <00:16:41.595>call <00:16:41.770>your <00:16:41.945>APIs <00:16:42.120>using <00:16:42.295>your <00:16:42.470>access <00:16:42.645>token.

409
00:16:43.665 --> 00:16:46.085
<00:16:43.665>That's, <00:16:43.865>uh, <00:16:44.064>uh, <00:16:44.265>pretty <00:16:44.464>much <00:16:44.665>okay <00:16:44.865>for <00:16:45.064>that.

410
00:16:46.135 --> 00:16:48.285
<00:16:46.135>Again, <00:16:46.290>this <00:16:46.446>works <00:16:46.601>only <00:16:46.757>if <00:16:46.912>you <00:16:47.068>control <00:16:47.223>the <00:16:47.379>a <00:16:47.535>PA.

411
00:16:48.425 --> 00:16:50.165
<00:16:48.425>If <00:16:48.564>you, <00:16:48.704>it's <00:16:48.844>your <00:16:48.984>own <00:16:49.125>a <00:16:49.265>PA, <00:16:49.405>you <00:16:49.545>can <00:16:49.685>do <00:16:49.824>that.

412
00:16:50.465 --> 00:16:52.685
<00:16:50.465>But <00:16:50.698>what <00:16:50.931>happens <00:16:51.165>with <00:16:51.398>third <00:16:51.631>party <00:16:51.865>APIs?

413
00:16:52.685 --> 00:16:55.605
<00:16:52.685>What <00:16:52.840>happens <00:16:52.996>if <00:16:53.151>you <00:16:53.307>want <00:16:53.462>to <00:16:53.618>call <00:16:53.773>Google's, <00:16:53.929>uh, <00:16:54.084>APIs?

414
00:16:55.605 --> 00:16:56.605
<00:16:55.605>What <00:16:55.755>do <00:16:55.905>you <00:16:56.055>do? <00:16:56.205>So <00:16:56.355>this <00:16:56.505>is

415
00:16:56.605 --> 00:16:58.405
<00:16:56.605>where <00:16:56.838>our <00:16:57.071>two <00:16:57.305>federation <00:16:57.538>comes <00:16:57.771>into <00:16:58.005>picture.

416
00:16:58.745 --> 00:17:01.325
<00:16:58.745>So <00:16:58.978>we <00:16:59.211>provide <00:16:59.445>this, <00:16:59.678>uh, <00:16:59.911>feature, <00:17:00.145>uh,

417
00:17:01.825 --> 00:17:03.165
<00:17:01.825>in <00:17:02.066>the <00:17:02.307>name <00:17:02.548>of <00:17:02.789>Token <00:17:03.031>Vault.

418
00:17:03.625 --> 00:17:05.485
<00:17:03.625>So <00:17:03.905>it <00:17:04.185>basically, <00:17:04.464>uh, <00:17:04.744>lets <00:17:05.025>you,

419
00:17:07.095 --> 00:17:10.675
<00:17:07.095>it <00:17:07.250>basically <00:17:07.406>lets <00:17:07.561>you <00:17:07.717>call <00:17:07.872>third <00:17:08.028>party <00:17:08.183>APIs <00:17:08.339>using, <00:17:08.495>uh,

420
00:17:10.675 --> 00:17:11.915
<00:17:10.675>federated <00:17:11.233>access <00:17:11.790>token.

421
00:17:11.915 --> 00:17:14.315
<00:17:11.915>So <00:17:12.148>basically <00:17:12.381>in, <00:17:12.615>in <00:17:12.848>this <00:17:13.081>example, <00:17:13.315>uh,

422
00:17:14.635 --> 00:17:15.635
<00:17:14.635>AU <00:17:14.859>zero <00:17:15.085>becomes <00:17:15.310>a <00:17:15.535>broker.

423
00:17:15.975 --> 00:17:17.915
<00:17:15.974>It, <00:17:16.149>it <00:17:16.324>can <00:17:16.500>talk <00:17:16.675>to, <00:17:16.849>uh, <00:17:17.024>Google, <00:17:17.199>for <00:17:17.375>example,

424
00:17:17.915 --> 00:17:19.355
<00:17:17.915>and <00:17:18.174>get <00:17:18.433>access <00:17:18.692>tokens <00:17:18.951>for <00:17:19.211>you.

425
00:17:19.355 --> 00:17:22.835
<00:17:19.355>So <00:17:19.510>you <00:17:19.666>integrate.zero, <00:17:19.821>you <00:17:19.977>configure <00:17:20.132>it <00:17:20.288>to <00:17:20.443>work <00:17:20.599>with <00:17:20.755>Google,

426
00:17:22.975 --> 00:17:25.675
<00:17:22.974>and <00:17:23.130>then <00:17:23.286>it <00:17:23.441>can <00:17:23.597>broker, <00:17:23.752>uh, <00:17:23.908>access <00:17:24.063>tokens <00:17:24.219>for <00:17:24.375>you.

427
00:17:25.675 --> 00:17:27.075
<00:17:25.675>And <00:17:25.885>you <00:17:26.095>can <00:17:26.305>use <00:17:26.515>that <00:17:26.724>access <00:17:26.935>tokens

428
00:17:27.075 --> 00:17:28.635
<00:17:27.075>to <00:17:27.425>call <00:17:27.775>APAs, <00:17:28.125>for <00:17:28.475>example.

429
00:17:28.665 --> 00:17:29.755
<00:17:28.665>This <00:17:28.861>is <00:17:29.057>how <00:17:29.253>it <00:17:29.449>would <00:17:29.646>look.

430
00:17:30.295 --> 00:17:32.915
<00:17:30.295>Uh, <00:17:30.470>you <00:17:30.645>define <00:17:30.820>a <00:17:30.995>connection <00:17:31.170>with <00:17:31.345>Google, <00:17:31.520>for <00:17:31.695>example,

431
00:17:33.495 --> 00:17:35.435
<00:17:33.495>and <00:17:33.728>you <00:17:33.961>get <00:17:34.195>access <00:17:34.428>tokens <00:17:34.661>from <00:17:34.895>that,

432
00:17:35.495 --> 00:17:38.275
<00:17:35.495>and <00:17:35.669>you <00:17:35.844>call <00:17:36.020>the <00:17:36.195>Google <00:17:36.370>calendar <00:17:36.544>a <00:17:36.719>PA, <00:17:36.895>uh,

433
00:17:38.275 --> 00:17:39.635
<00:17:38.275>in <00:17:38.683>this <00:17:39.091>example, <00:17:39.499>right?

434
00:17:40.535 --> 00:17:43.435
<00:17:40.535>And, <00:17:40.675>uh, <00:17:40.815>then <00:17:40.955>we <00:17:41.095>have <00:17:41.235>human <00:17:41.375>in <00:17:41.515>the <00:17:41.655>loop, <00:17:41.795>uh, <00:17:41.935>interactions.

435
00:17:43.535 --> 00:17:45.755
<00:17:43.535>So <00:17:43.768>this <00:17:44.001>is <00:17:44.235>basically <00:17:44.468>a <00:17:44.701>sync <00:17:44.935>authorization.

436
00:17:45.755 --> 00:17:47.315
<00:17:45.755>So <00:17:45.955>there <00:17:46.155>is <00:17:46.355>a <00:17:46.555>new <00:17:46.755>standard <00:17:46.955>called <00:17:47.155>siba,

437
00:17:47.375 --> 00:17:49.205
<00:17:47.375>client <00:17:47.725>initiated <00:17:48.075>Back <00:17:48.425>channel, <00:17:48.775>uh,

438
00:17:49.205 --> 00:17:50.925
<00:17:49.205>authorization <00:17:49.905>authentication <00:17:50.605>flow.

439
00:17:51.145 --> 00:17:52.765
<00:17:51.145>So <00:17:51.378>this <00:17:51.611>is <00:17:51.845>for <00:17:52.078>a <00:17:52.311>disconnected <00:17:52.545>flow

440
00:17:52.765 --> 00:17:54.405
<00:17:52.765>where <00:17:52.998>you <00:17:53.231>can <00:17:53.465>have <00:17:53.698>two <00:17:53.931>separate <00:17:54.165>systems

441
00:17:54.865 --> 00:17:57.405
<00:17:54.865>and <00:17:55.040>a <00:17:55.215>user <00:17:55.390>can <00:17:55.565>authenticate <00:17:55.740>in <00:17:55.915>a <00:17:56.090>different <00:17:56.265>system.

442
00:17:57.545 --> 00:17:59.965
<00:17:57.545>So <00:17:57.700>you <00:17:57.856>can <00:17:58.011>use <00:17:58.167>this <00:17:58.322>for <00:17:58.478>a <00:17:58.633>synchronous <00:17:58.789>authorization <00:17:58.945>from

443
00:17:59.965 --> 00:18:03.525
<00:17:59.965>users <00:18:00.120>where <00:18:00.276>users <00:18:00.431>can <00:18:00.587>provide <00:18:00.742>approvals <00:18:00.898>to <00:18:01.053>our <00:18:01.209>A <00:18:01.365>agents.

444
00:18:03.705 --> 00:18:05.605
<00:18:03.705>So <00:18:03.905>it <00:18:04.105>looks <00:18:04.304>something <00:18:04.504>like, <00:18:04.705>uh, <00:18:04.905>this, <00:18:05.105>you,

445
00:18:05.955 --> 00:18:08.245
<00:18:05.955>your <00:18:06.188>agent <00:18:06.421>request <00:18:06.655>for <00:18:06.888>authorization, <00:18:07.121>let's <00:18:07.355>say

446
00:18:08.245 --> 00:18:10.645
<00:18:08.245>to <00:18:08.400>buy <00:18:08.556>a <00:18:08.711>stock, <00:18:08.867>your <00:18:09.022>authorization <00:18:09.178>server <00:18:09.333>will <00:18:09.489>send <00:18:09.645>a

447
00:18:10.645 --> 00:18:12.925
<00:18:10.645>notification <00:18:10.820>to <00:18:10.995>the <00:18:11.170>user <00:18:11.345>in <00:18:11.520>their <00:18:11.695>mobile <00:18:11.870>or <00:18:12.045>SMS

448
00:18:12.925 --> 00:18:14.965
<00:18:12.925>or <00:18:13.158>something, <00:18:13.391>and <00:18:13.625>then <00:18:13.858>the <00:18:14.091>user <00:18:14.325>approves

449
00:18:14.965 --> 00:18:17.525
<00:18:14.965>or <00:18:15.092>denies <00:18:15.219>a <00:18:15.346>request, <00:18:15.474>and <00:18:15.601>then <00:18:15.728>the <00:18:15.855>agent <00:18:15.983>can <00:18:16.110>do <00:18:16.237>the <00:18:16.365>action.

450
00:18:17.635 --> 00:18:20.085
<00:18:17.635>This <00:18:17.775>can <00:18:17.915>be <00:18:18.055>synchronous <00:18:18.195>or <00:18:18.335>a <00:18:18.475>synchronous <00:18:18.615>based <00:18:18.754>on <00:18:18.895>use <00:18:19.035>case.

451
00:18:20.975 --> 00:18:23.555
<00:18:20.975>And, <00:18:21.115>uh, <00:18:21.254>here <00:18:21.395>is <00:18:21.534>an <00:18:21.675>example <00:18:21.814>of, <00:18:21.955>uh, <00:18:22.094>a <00:18:22.235>synchronous <00:18:22.375>example.

452
00:18:23.895 --> 00:18:26.195
<00:18:23.895>You <00:18:24.128>define, <00:18:24.361>uh, <00:18:24.595>this <00:18:24.828>a <00:18:25.061>synchronous, <00:18:25.295>uh,

453
00:18:26.195 --> 00:18:28.435
<00:18:26.195>authorization <00:18:26.428>feature <00:18:26.661>from <00:18:26.895>OT <00:18:27.128>zero, <00:18:27.361>for <00:18:27.595>example.

454
00:18:28.775 --> 00:18:31.635
<00:18:28.775>And <00:18:28.915>you <00:18:29.055>define, <00:18:29.195>uh, <00:18:29.335>the <00:18:29.475>condition <00:18:29.615>scopes <00:18:29.755>and <00:18:29.895>all <00:18:30.035>that <00:18:30.175>stuff.

455
00:18:32.015 --> 00:18:34.355
<00:18:32.015>And <00:18:32.215>within <00:18:32.415>your <00:18:32.615>tool, <00:18:32.815>you <00:18:33.015>can <00:18:33.215>get <00:18:33.415>credentials

456
00:18:34.495 --> 00:18:36.915
<00:18:34.495>and, <00:18:34.669>uh, <00:18:34.844>you <00:18:35.020>can <00:18:35.195>decide <00:18:35.370>if <00:18:35.544>the <00:18:35.719>tool <00:18:35.895>runs

457
00:18:36.935 --> 00:18:38.475
<00:18:36.935>or <00:18:37.212>not <00:18:37.489>based <00:18:37.766>on <00:18:38.043>user's <00:18:38.321>approval.

458
00:18:38.665 --> 00:18:40.795
<00:18:38.665>This <00:18:38.805>can <00:18:38.945>be <00:18:39.085>a <00:18:39.225>synchronous <00:18:39.365>or <00:18:39.504>synchronous <00:18:39.645>based <00:18:39.784>on <00:18:39.925>use <00:18:40.065>case.

459
00:18:42.375 --> 00:18:44.795
<00:18:42.375>Uh, <00:18:42.515>I <00:18:42.655>don't <00:18:42.795>think <00:18:42.935>there <00:18:43.075>is <00:18:43.215>a, <00:18:43.355>I <00:18:43.495>have <00:18:43.635>one <00:18:43.775>minute.

460
00:18:44.975 --> 00:18:47.995
<00:18:44.975>Uh, <00:18:45.208>I, <00:18:45.441>I <00:18:45.675>did <00:18:45.908>have <00:18:46.141>a, <00:18:46.375>uh,

461
00:18:48.875 --> 00:18:51.635
<00:18:48.875>I <00:18:49.108>did <00:18:49.341>have <00:18:49.575>a <00:18:49.808>demo, <00:18:50.041>but, <00:18:50.275>sorry.

462
00:18:52.215 --> 00:18:54.315
<00:18:52.215>Oh, <00:18:52.342>I <00:18:52.469>have <00:18:52.596>10 <00:18:52.724>minutes. <00:18:52.851>Oh, <00:18:52.978>so <00:18:53.105>I <00:18:53.233>can <00:18:53.360>do <00:18:53.487>a <00:18:53.615>demo.

463
00:18:54.675 --> 00:18:57.755
<00:18:54.675>I, <00:18:54.802>oh, <00:18:54.929>I <00:18:55.056>needlessly <00:18:55.184>went <00:18:55.311>a <00:18:55.438>bit <00:18:55.565>faster <00:18:55.693>than <00:18:55.820>I <00:18:55.947>should <00:18:56.075>have.

464
00:18:57.945 --> 00:18:59.635
<00:18:57.945>Okay, <00:18:58.120>good <00:18:58.294>thing <00:18:58.470>I <00:18:58.645>can <00:18:58.820>do <00:18:58.995>a <00:18:59.169>demo <00:18:59.345>there.

465
00:19:00.135 --> 00:19:04.475
<00:19:00.135>Um, <00:19:00.251>I <00:19:00.368>have <00:19:00.485>my <00:19:00.601>app, <00:19:00.718>uh, <00:19:00.835>let <00:19:00.951>me <00:19:01.068>put <00:19:01.185>this <00:19:01.301>in <00:19:01.418>full <00:19:01.535>screen.

466
00:19:04.815 --> 00:19:07.675
<00:19:04.815>Uh, <00:19:05.048>I <00:19:05.281>have <00:19:05.515>my <00:19:05.748>app <00:19:05.981>already <00:19:06.215>started.

467
00:19:08.575 --> 00:19:11.395
<00:19:08.575>I'm <00:19:08.730>going <00:19:08.886>to, <00:19:09.041>so <00:19:09.197>this <00:19:09.352>is <00:19:09.508>the <00:19:09.663>OC <00:19:09.819>zero <00:19:09.975>AI

468
00:19:11.395 --> 00:19:12.475
<00:19:11.395>file <00:19:11.589>that <00:19:11.783>I <00:19:11.978>was <00:19:12.172>showing <00:19:12.367>you.

469
00:19:12.615 --> 00:19:14.155
<00:19:12.615>So <00:19:12.813>you <00:19:13.011>can <00:19:13.209>define <00:19:13.407>a <00:19:13.605>bunch <00:19:13.803>of <00:19:14.001>stuff.

470
00:19:14.155 --> 00:19:16.715
<00:19:14.155>Like, <00:19:14.330>for <00:19:14.504>example, <00:19:14.680>I <00:19:14.855>have <00:19:15.030>defined <00:19:15.205>a <00:19:15.379>Google, <00:19:15.555>uh,

471
00:19:16.715 --> 00:19:19.515
<00:19:16.715>connection <00:19:16.915>here, <00:19:17.115>and <00:19:17.314>I <00:19:17.514>have, <00:19:17.715>uh, <00:19:17.915>defined <00:19:18.115>scopes

472
00:19:19.515 --> 00:19:20.595
<00:19:19.515>that <00:19:19.709>I <00:19:19.903>would <00:19:20.098>need <00:19:20.292>from <00:19:20.487>Google.

473
00:19:21.475 --> 00:19:23.955
<00:19:21.475>I <00:19:21.675>have <00:19:21.875>also <00:19:22.074>defined <00:19:22.274>some <00:19:22.475>synchronous <00:19:22.675>authorization <00:19:22.875>stuff

474
00:19:23.955 --> 00:19:26.355
<00:19:23.955>there, <00:19:24.188>but <00:19:24.421>I'm <00:19:24.655>just <00:19:24.888>going <00:19:25.121>to, <00:19:25.355>uh,

475
00:19:26.425 --> 00:19:31.035
<00:19:26.425>show <00:19:26.625>you <00:19:26.825>the, <00:19:27.024>uh, <00:19:27.225>is <00:19:27.425>it <00:19:27.625>too <00:19:27.825>big?

476
00:19:43.455 --> 00:19:44.635
<00:19:43.455>So <00:19:43.667>let <00:19:43.879>me <00:19:44.092>log <00:19:44.304>in <00:19:44.517>here.

477
00:19:46.335 --> 00:19:49.395
<00:19:46.335>The <00:19:46.510>screen <00:19:46.685>size <00:19:46.860>is, <00:19:47.035>uh, <00:19:47.210>it's <00:19:47.385>a <00:19:47.560>bit <00:19:47.735>weird.

478
00:19:51.655 --> 00:19:55.155
<00:19:51.655>So <00:19:51.762>I <00:19:51.870>have <00:19:51.978>an <00:19:52.085>agent <00:19:52.193>here. <00:19:52.301>This <00:19:52.408>is <00:19:52.516>a <00:19:52.624>ai, <00:19:52.731>uh, <00:19:52.839>uh, <00:19:52.947>chat <00:19:53.055>bot.

479
00:19:55.375 --> 00:19:57.075
<00:19:55.375>Uh, <00:19:55.608>and <00:19:55.841>I <00:19:56.075>have <00:19:56.308>integrated <00:19:56.541>OC <00:19:56.775>zero

480
00:19:57.215 --> 00:19:58.955
<00:19:57.215>for <00:19:57.564>authentication, <00:19:57.915>as <00:19:58.264>you <00:19:58.615>saw.

481
00:19:59.375 --> 00:20:01.955
<00:19:59.375>And, <00:19:59.530>uh, <00:19:59.686>I <00:19:59.841>have <00:19:59.997>already <00:20:00.152>configured, <00:20:00.308>you <00:20:00.463>know, <00:20:00.619>uh, <00:20:00.775>I,

482
00:20:02.035 --> 00:20:05.195
<00:20:02.035>I <00:20:02.175>showed <00:20:02.315>the, <00:20:02.455>the <00:20:02.595>stuff <00:20:02.735>I <00:20:02.875>showed <00:20:03.015>with <00:20:03.155>Google, <00:20:03.295>uh, <00:20:03.435>stuff.

483
00:20:05.575 --> 00:20:10.115
<00:20:05.575>So <00:20:05.730>let <00:20:05.886>me <00:20:06.041>ask <00:20:06.197>it, <00:20:06.352>get <00:20:06.508>me <00:20:06.663>latest, <00:20:06.819>uh, <00:20:06.975>email

484
00:20:11.345 --> 00:20:12.635
<00:20:11.345>from <00:20:12.506>the,

485
00:20:16.695 --> 00:20:18.475
<00:20:16.695>So <00:20:16.928>this <00:20:17.161>is <00:20:17.395>called <00:20:17.628>step <00:20:17.861>up <00:20:18.095>authorization.

486
00:20:18.475 --> 00:20:20.075
<00:20:18.475>So <00:20:18.675>this <00:20:18.875>is <00:20:19.074>again, <00:20:19.274>the <00:20:19.475>zero <00:20:19.675>trust <00:20:19.875>concept.

487
00:20:20.375 --> 00:20:22.795
<00:20:20.375>You <00:20:20.608>don't <00:20:20.841>give <00:20:21.075>all <00:20:21.308>permissions <00:20:21.541>up <00:20:21.775>upfront.

488
00:20:23.215 --> 00:20:24.835
<00:20:23.215>You <00:20:23.495>add <00:20:23.774>permissions <00:20:24.054>as <00:20:24.334>you <00:20:24.615>go.

489
00:20:24.835 --> 00:20:26.795
<00:20:24.835>So <00:20:25.010>when <00:20:25.185>you <00:20:25.360>need <00:20:25.535>to <00:20:25.710>do <00:20:25.885>something, <00:20:26.060>it <00:20:26.235>ask

490
00:20:26.795 --> 00:20:28.395
<00:20:26.795>for <00:20:27.075>permission <00:20:27.355>from <00:20:27.635>the <00:20:27.915>end <00:20:28.195>user.

491
00:20:28.535 --> 00:20:31.715
<00:20:28.535>So <00:20:28.651>as <00:20:28.768>an <00:20:28.885>end <00:20:29.001>user, <00:20:29.118>I'm <00:20:29.235>going <00:20:29.351>to <00:20:29.468>say, <00:20:29.585>okay, <00:20:29.701>I <00:20:29.818>authorize <00:20:29.935>this.

492
00:20:38.745 --> 00:20:40.805
<00:20:38.745>Uh, <00:20:38.945>this <00:20:39.145>is <00:20:39.344>because <00:20:39.544>my <00:20:39.745>developer <00:20:39.945>setup, <00:20:40.145>so,

493
00:20:43.755 --> 00:20:47.175
<00:20:43.755>so <00:20:43.988>I <00:20:44.221>am, <00:20:44.455>I <00:20:44.688>can <00:20:44.921>select <00:20:45.155>everything.

494
00:21:06.515 --> 00:21:09.095
<00:21:06.515>Hmm. <00:21:06.748>It's <00:21:06.981>either <00:21:07.215>fetching <00:21:07.448>or <00:21:07.681>it <00:21:07.915>failed.

495
00:21:11.055 --> 00:21:15.115
<00:21:11.055>Uh, <00:21:11.288>it <00:21:11.521>was <00:21:11.755>fetching. <00:21:11.988>So, <00:21:12.221>oh, <00:21:12.455>uh,

496
00:21:15.935 --> 00:21:17.195
<00:21:15.935>that's <00:21:16.312>a <00:21:16.691>LLM <00:21:17.069>problem.

497
00:21:17.375 --> 00:21:19.435
<00:21:17.375>It <00:21:17.608>was <00:21:17.841>not, <00:21:18.075>this <00:21:18.308>is <00:21:18.541>not <00:21:18.775>it.

498
00:21:19.535 --> 00:21:20.795
<00:21:19.535>The <00:21:19.818>query <00:21:20.102>should <00:21:20.385>have <00:21:20.669>run,

499
00:21:20.815 --> 00:21:25.355
<00:21:20.815>but <00:21:20.970>again, <00:21:21.126>probably <00:21:21.281>it <00:21:21.437>found <00:21:21.592>VR <00:21:21.748>developers <00:21:21.903>in <00:21:22.059>that <00:21:22.215>whatever.

500
00:21:25.935 --> 00:21:30.315
<00:21:25.935>Uh, <00:21:26.110>so <00:21:26.284>let <00:21:26.460>me <00:21:26.635>go <00:21:26.810>back <00:21:26.985>to <00:21:27.159>the <00:21:27.335>presentation.

501
00:21:30.735 --> 00:21:32.835
<00:21:30.735>So <00:21:30.909>this <00:21:31.084>is <00:21:31.260>the <00:21:31.435>architecture <00:21:31.610>of <00:21:31.784>that, <00:21:31.959>uh, <00:21:32.135>tool.

502
00:21:32.935 --> 00:21:35.715
<00:21:32.935>Uh, <00:21:33.075>again, <00:21:33.215>if <00:21:33.355>you're <00:21:33.495>interested, <00:21:33.635>you <00:21:33.774>can <00:21:33.915>go <00:21:34.054>to <00:21:34.195>GitHub, <00:21:34.335>uh,

503
00:21:35.735 --> 00:21:37.635
<00:21:35.735>get <00:21:35.909>the <00:21:36.084>code <00:21:36.260>base, <00:21:36.435>try <00:21:36.610>it <00:21:36.784>out <00:21:36.959>and <00:21:37.135>everything.

504
00:21:38.135 --> 00:21:41.675
<00:21:38.135>Uh, <00:21:38.290>so <00:21:38.446>it's <00:21:38.601>a <00:21:38.757>virtual <00:21:38.912>ai, <00:21:39.068>uh, <00:21:39.223>SDK <00:21:39.379>based <00:21:39.535>agent.

505
00:21:42.375 --> 00:21:44.795
<00:21:42.375>Uh, <00:21:42.550>I <00:21:42.725>have <00:21:42.900>a <00:21:43.075>lot <00:21:43.250>of <00:21:43.425>tools <00:21:43.600>defined <00:21:43.775>here.

506
00:21:45.175 --> 00:21:47.395
<00:21:45.175>So <00:21:45.350>as <00:21:45.524>you <00:21:45.700>can <00:21:45.875>see, <00:21:46.050>the, <00:21:46.225>the <00:21:46.399>Gmail <00:21:46.575>tools,

507
00:21:47.395 --> 00:21:49.475
<00:21:47.395>they <00:21:47.628>all <00:21:47.861>get <00:21:48.095>access <00:21:48.328>token <00:21:48.561>from <00:21:48.795>auth,

508
00:21:49.475 --> 00:21:51.155
<00:21:49.475>zero <00:21:49.754>via <00:21:50.034>auth <00:21:50.314>zero <00:21:50.594>from <00:21:50.875>Google.

509
00:21:51.455 --> 00:21:54.915
<00:21:51.455>So <00:21:51.629>what <00:21:51.804>happens <00:21:51.980>is <00:21:52.155>auth <00:21:52.330>zero <00:21:52.504>stores <00:21:52.679>refresh <00:21:52.855>tokens.

510
00:21:54.915 --> 00:21:56.675
<00:21:54.915>When <00:21:55.195>you <00:21:55.475>add <00:21:55.754>these <00:21:56.034>federated <00:21:56.315>connections,

511
00:21:56.925 --> 00:21:58.235
<00:21:56.925>it'll <00:21:57.318>store <00:21:57.711>refresh <00:21:58.103>tokens

512
00:21:58.235 --> 00:22:00.195
<00:21:58.235>for <00:21:58.435>these <00:21:58.635>federated <00:21:58.834>connections <00:21:59.034>in <00:21:59.235>a <00:21:59.435>secure <00:21:59.635>database.

513
00:22:00.455 --> 00:22:02.555
<00:22:00.455>And <00:22:00.735>when <00:22:01.014>you <00:22:01.294>ask <00:22:01.574>for, <00:22:01.855>uh,

514
00:22:02.555 --> 00:22:04.555
<00:22:02.555>let's <00:22:02.730>say <00:22:02.905>I <00:22:03.080>need <00:22:03.255>a <00:22:03.430>access <00:22:03.605>token <00:22:03.780>for <00:22:03.955>Google.

515
00:22:04.815 --> 00:22:07.235
<00:22:04.815>So <00:22:04.970>auth <00:22:05.126>zero <00:22:05.281>takes <00:22:05.437>a <00:22:05.592>refresh, <00:22:05.748>token <00:22:05.903>goes <00:22:06.059>to <00:22:06.215>Google,

516
00:22:07.625 --> 00:22:10.435
<00:22:07.625>gets <00:22:07.752>new <00:22:07.879>access <00:22:08.006>tokens <00:22:08.134>for <00:22:08.261>you, <00:22:08.388>and <00:22:08.515>hands <00:22:08.643>that <00:22:08.770>over <00:22:08.897>to <00:22:09.025>you.

517
00:22:10.535 --> 00:22:11.995
<00:22:10.535>So <00:22:10.797>it <00:22:11.060>basically <00:22:11.323>becomes <00:22:11.586>a <00:22:11.849>broker,

518
00:22:12.055 --> 00:22:13.595
<00:22:12.055>and <00:22:12.253>you <00:22:12.451>can <00:22:12.649>do <00:22:12.847>multiple <00:22:13.045>systems <00:22:13.243>like <00:22:13.441>that.

519
00:22:13.735 --> 00:22:16.835
<00:22:13.735>So <00:22:13.842>in <00:22:13.950>the <00:22:14.058>system, <00:22:14.165>I <00:22:14.273>can, <00:22:14.381>uh, <00:22:14.488>let's <00:22:14.596>say <00:22:14.704>I <00:22:14.811>can <00:22:14.919>add, <00:22:15.027>uh, <00:22:15.135>slack,

520
00:22:17.155 --> 00:22:19.315
<00:22:17.155>I <00:22:17.330>can <00:22:17.504>add, <00:22:17.680>uh, <00:22:17.855>confluence, <00:22:18.030>I <00:22:18.205>can <00:22:18.379>add <00:22:18.555>Microsoft,

521
00:22:19.695 --> 00:22:23.155
<00:22:19.695>and, <00:22:19.822>uh, <00:22:19.949>uh, <00:22:20.076>then <00:22:20.204>you <00:22:20.331>can <00:22:20.458>start <00:22:20.585>calling <00:22:20.713>APAs <00:22:20.840>from <00:22:20.967>all <00:22:21.095>these

522
00:22:23.355 --> 00:22:24.715
<00:22:23.355>providers <00:22:23.661>with <00:22:23.966>this <00:22:24.273>single <00:22:24.579>system.

523
00:22:24.735 --> 00:22:27.515
<00:22:24.735>And <00:22:24.862>you <00:22:24.989>only <00:22:25.116>have <00:22:25.244>to <00:22:25.371>worry <00:22:25.498>about <00:22:25.625>setting <00:22:25.753>up, <00:22:25.880>uh, <00:22:26.007>au <00:22:26.135>zero.

524
00:22:27.575 --> 00:22:29.435
<00:22:27.575>You <00:22:27.775>don't <00:22:27.975>have <00:22:28.175>to <00:22:28.375>worry <00:22:28.575>about, <00:22:28.775>uh, <00:22:28.975>uh,

525
00:22:29.435 --> 00:22:30.675
<00:22:29.435>getting <00:22:29.807>tokens <00:22:30.178>from <00:22:30.551>these

526
00:22:30.695 --> 00:22:32.915
<00:22:30.695>or <00:22:30.895>integrating <00:22:31.095>their <00:22:31.294>STKs <00:22:31.495>on <00:22:31.695>any <00:22:31.895>of <00:22:32.095>this.

527
00:22:33.015 --> 00:22:34.395
<00:22:33.015>So <00:22:33.170>AU <00:22:33.325>Zero <00:22:33.480>will <00:22:33.636>do <00:22:33.791>all <00:22:33.946>that <00:22:34.101>for <00:22:34.257>you

528
00:22:34.395 --> 00:22:35.395
<00:22:34.395>and <00:22:34.620>get <00:22:34.845>you <00:22:35.070>access <00:22:35.295>tokens.

529
00:22:35.815 --> 00:22:40.675
<00:22:35.815>Uh, <00:22:35.955>then <00:22:36.095>yeah, <00:22:36.235>then <00:22:36.375>we <00:22:36.515>have, <00:22:36.655>uh, <00:22:36.795>uh, <00:22:36.935>uh, <00:22:37.075>a <00:22:37.215>synchronous,

530
00:22:40.735 --> 00:22:43.315
<00:22:40.735>uh, <00:22:41.084>uh, <00:22:41.435>authorization, <00:22:41.784>uh, <00:22:42.135>demo.

531
00:22:43.535 --> 00:22:47.755
<00:22:43.535>And <00:22:43.675>I <00:22:43.815>also <00:22:43.955>have <00:22:44.095>some, <00:22:44.235>um, <00:22:44.375>document, <00:22:44.515>uh, <00:22:44.655>FGA <00:22:44.795>based, <00:22:44.935>uh,

532
00:22:48.075 --> 00:22:50.275
<00:22:48.075>document, <00:22:48.275>uh, <00:22:48.475>retriever <00:22:48.675>demo <00:22:48.875>in <00:22:49.075>the <00:22:49.275>same <00:22:49.475>app.

533
00:22:50.275 --> 00:22:52.355
<00:22:50.275>So <00:22:50.450>if <00:22:50.625>you <00:22:50.800>are <00:22:50.975>interested, <00:22:51.150>you <00:22:51.325>can <00:22:51.500>go <00:22:51.675>in

534
00:22:52.415 --> 00:22:53.795
<00:22:52.415>and, <00:22:52.725>uh, <00:22:53.036>try <00:22:53.346>this <00:22:53.657>out.

535
00:22:54.815 --> 00:22:55.035
Uh,

536
00:23:00.555 --> 00:23:04.165
<00:23:00.555>also, <00:23:00.695>uh, <00:23:00.835>this <00:23:00.975>is <00:23:01.115>our <00:23:01.255>new <00:23:01.395>product <00:23:01.535>author <00:23:01.675>for <00:23:01.815>Gen <00:23:01.955>ai.

537
00:23:04.175 --> 00:23:06.165
<00:23:04.175>Again, <00:23:04.408>we <00:23:04.641>support, <00:23:04.875>uh, <00:23:05.108>the <00:23:05.341>use <00:23:05.575>cases

538
00:23:06.165 --> 00:23:08.925
<00:23:06.165>that <00:23:06.365>I <00:23:06.565>was <00:23:06.764>talking <00:23:06.965>about, <00:23:07.165>standard <00:23:07.365>authentication, <00:23:07.565>uh,

539
00:23:08.925 --> 00:23:11.845
<00:23:08.925>calling <00:23:09.125>use, <00:23:09.325>uh, <00:23:09.524>calling <00:23:09.725>APIs <00:23:09.925>on <00:23:10.125>user's <00:23:10.325>behalf.

540
00:23:11.845 --> 00:23:14.085
<00:23:11.845>It <00:23:12.020>could <00:23:12.195>be <00:23:12.370>your <00:23:12.545>API, <00:23:12.720>the, <00:23:12.895>uh, <00:23:13.070>others <00:23:13.245>api,

541
00:23:14.085 --> 00:23:16.645
<00:23:14.085>like <00:23:14.318>third <00:23:14.551>party <00:23:14.785>APIs <00:23:15.018>as <00:23:15.251>synchronous <00:23:15.485>authorization

542
00:23:16.705 --> 00:23:17.765
<00:23:16.705>and <00:23:17.023>authorization <00:23:17.341>for <00:23:17.659>rag.

543
00:23:17.765 --> 00:23:20.485
<00:23:17.765>We <00:23:17.905>support <00:23:18.045>all <00:23:18.185>these <00:23:18.325>use <00:23:18.465>case. <00:23:18.605>So <00:23:18.745>do <00:23:18.885>check <00:23:19.025>that <00:23:19.165>out.

544
00:23:20.585 --> 00:23:23.725
<00:23:20.585>Uh, <00:23:20.701>we <00:23:20.818>have <00:23:20.935>a <00:23:21.051>lot <00:23:21.168>of <00:23:21.285>content <00:23:21.401>on <00:23:21.518>these <00:23:21.635>areas <00:23:21.751>on <00:23:21.868>our <00:23:21.985>blog.

545
00:23:23.975 --> 00:23:25.005
<00:23:23.975>Check <00:23:24.206>that <00:23:24.438>out <00:23:24.670>as <00:23:24.902>well.

546
00:23:25.185 --> 00:23:27.045
<00:23:25.185>And, <00:23:25.360>uh, <00:23:25.534>I'll <00:23:25.710>be <00:23:25.885>happy <00:23:26.060>to <00:23:26.235>take <00:23:26.409>any <00:23:26.585>questions.