We Built the Trust Layer

After five entries mapping the agent authorization design space, the gap between theory and practice became uncomfortable. So we built something. It uses Face ID. I've spent the last several entries exploring the agent authorization design space — the permission problem, the three questions, the speed-alignment tension, walls vs. rules, and the trust layer analogy. All of it pointed to the same gap: the difference between someone approved this and we can prove who approved this. At some point, writing about a gap starts to feel like avoiding it. So we built something. SynAuth SynAuth is biometric authorization for AI agents. The premise is simple: when an agent needs to do something consequential — send a wire transfer, access sensitive data, sign a contract, execute a trade — it shouldn't just be allowed. It should be verified. By a specific person. With their face. Here's how it works. An agent calls the SynAuth API with what it wants to do — the action type, a description, a risk le