Show HN: OWASP Finbot Defended with Tenuo (github.com)

1 points by daniel_tenuo 19d ago ↗ HN

Tenuo is a task-scoped authz primitive for agentic work. We are an open protocol and an open source implementation at github.com/tenuo-ai/tenuo

We created a fork of OWASP finbot with Tenuo wired in and red-teamed it with promptfoo. We went from 50 successful attacks to 0 with Tenuo.

The promptfoo attacks were able to fool the model, but the deterministic guardrails Tenuo provides stopped it from acting on the poisoned instructions.

2 comments

[ 1.7 ms ] story [ 17.1 ms ] thread

RajanChavada 18d ago ↗

I've implemented Tenuo with Temporal recently and have seen prompt-injection fail outright on planted tests. Honestly super useful considering the Agents i'm building require trust to operate on client data without the failure of injection.

chstr_9 18d ago ↗

Its clear that having broad permissions leaves room for Agents to go awry. This example of task bound permission's successful defence is very interesting! Curious to see this being leveraged in production.