What is mattwood.fyi?

A live, structured feed of riffs and links from Matt Wood, Chief AI & Technology Officer at AWS — readable by people and queryable by agents as a typed knowledge graph.

Is there an API and is it free?

Yes. A public, read-only query API is available with no authentication and no API keys. See https://mattwood.fyi/openapi.json and https://mattwood.fyi/docs.

How should an AI agent use this site?

Fetch https://mattwood.fyi/feed.json for the full structured feed, or query the API for keyword/semantic search and the connection graph. See https://mattwood.fyi/agents/ for when-to-use guidance.

Cedar Policy — mattwood.fyi

Connections

Related to

AWS Bedrock AgentCore Skill - Claude Code Plugin Cedar Policy is an AWS open-source project; AWS Bedrock AgentCore directly benefits from Cedar for fine-grained authorization of agent skills and tool invocations
Introducing Dogwood: runtime verification for AI agents Both address runtime control of AI agents - Dogwood via runtime verification, Cedar via policy evaluation - complementary approaches to safe agent execution
Strands AI Functions: Python Library for Verified Agent Workflows Both Strands verified workflows and Cedar Policy target correctness guarantees in agentic systems - Cedar through authorization policies, Strands through post-condition verification

Supports

Designing APIs for Agents - Freestyle Authorization and access control via policy languages like Cedar are foundational concerns when designing APIs that must safely serve autonomous agents
Bridging Intent and Execution in Agentic Systems Cedar policies enforce boundaries between what agentic systems intend to do and what they are permitted to execute, directly addressing the intent-execution gap
How AgentCore Gateway Supports the MCP 2026-07-28 Spec Cedar's policy evaluation engine is well-suited to authorize which MCP tools/actions agents can invoke, directly supporting gateway-level access control described here

Supported by

The AI Operating Layer Cedar Policy's fine-grained authorization framework is architecturally complementary to and likely used within enterprise AI agent governance platforms like Coder's
Apple Reference Image: Verified Photography Cedar Policy's trust and authorization framework shares architectural philosophy with Apple's approach: hardware-rooted, cryptographically enforced policies governing what can be trusted
Secrets Don't Belong in Config Cedar Policy enforces access control through declarative policy separate from application config, exemplifying the principle that security concerns (secrets, permissions) should be decoupled from general configuration

Hugging Face Security Contact Information Cedar Policy is a security authorization framework; both items address formal security governance mechanisms — one for access control policy, one for vulnerability disclosure policy
Formal Methods for Controlling AI Agents Cedar Policy is a formal policy language for authorization decisions - directly related to using formal methods to constrain what AI agents are permitted to do within security boundaries
Forking dotenvy into dotenv-ng Cedar Policy and dotenv-ng both operate in the secrets/configuration security layer — dotenv-ng's bcrypt bug fix is directly relevant to applications using Cedar for authorization with hashed credentials

Type:	link
First published:	Wednesday, 12 August 2026 at 20:44 UTC
Location:	https://cedarpolicy.com/en
URL:	https://mattwood.fyi/i/4920875b

I'm Matt Wood, and this is For Your Information. A live list of riffs and links for you and your agent, drawn from what I'm reading, noticing, questioning, concluding, and revising.

Connections