Authz

A human’s yes,wherever they are.

Your agents ask. You answer.

✻ Welcome to Claude Code!
/help for help, /status for your current setup cwd: ~/Developer/api
ship build 412
⏺Bash(authz ask "Deploy the API" --verified -- ./deploy --tag 412)
· Reticulating… (4s · thinking)
> ▌
? for shortcuts
Claude Code · mbp-m5-max

Deploy the API

./deploy --tag 412

It finds you where you are.

At your Mac, a card over your work. Away, your iPhone.

How it works
Claude Code · mbp-m5-max

Deploy the API

./deploy --tag 412

Sunday 18 October

9:41

Authzmbp-m5-max

Deploy the API

./deploy --tag 412

What you approve is what runs.

A yes is only worth what it is bound to.

How it works

Touch ID or Face ID, signed by the Secure Enclave.

The command pinned by hash, checked again before it runs.

Secrets and wallet keys never leave their helper.

A signed receipt for every yes.

One line to ask.

Everything after -- is what you approve, and Authz runs it itself, only after your yes, checked byte for byte. A yes can't be spent on anything else.

How it works
bash
authz ask "Deploy the API" --verified -- ./deploy --tag 412

A payment is a permission with a price.

How it works

Experimental.

Runs on one person’s devices. Nothing is released before its security review.

How it works