Tenuo

Overview

Tenuo is a Rust library that applies task-scoped authorization to AI agents. It uses cryptographic warrants to constrain which tools and arguments an agent can access, preventing privilege escalation across delegation hops and generating signed evidence of allow or deny decisions.

Best for

Best for
Rust developers building AI agents that need auditable, delegation-safe authorization

Use cases

• Restrict an agent's tool access to a single task
• Audit agent actions with signed authorization evidence
• Safely delegate permissions across multi-step agent workflows

Notes

Tenuo is a Rust library that applies task-scoped authorization to AI agents. It uses cryptographic warrants to constrain which tools and arguments an agent can access, preventing privilege escalation across delegation hops and generating signed evidence of allow or deny decisions.

92 stars on GitHub. Last updated 2026-09-22.

Use cases

• Restrict an agent’s tool access to a single task
• Audit agent actions with signed authorization evidence
• Safely delegate permissions across multi-step agent workflows

Pros

• Cryptographic warrants provide strong, verifiable constraints
• Prevents privilege escalation during agent delegation
• Produces signed evidence for auditing

Cons

• Rust-only, limiting adoption outside Rust ecosystems
• Small community with 92 stars, so limited battle-testing
• Requires integrating warrant logic into agent tooling

Indexed from awesome-langchain and enriched against its public facts.