Reading series
Enterprise agent apps
Authorization, knowledge RBAC, session durability, and private networking for production agent webapps.
Posts in this series
Read in order for the full architecture arc, or jump to the post you need.
Part 1 · Aug 17, 2026 · 8 min read
Signing in is not authorization: app access is not agent access
Why enterprise agent webapps need separate control planes for shell sign-in, agent catalog access, and knowledge corpus entitlements, and how Entra app roles on the API make that enforceable.
Part 2 · Aug 4, 2026 · 8 min read
Knowledge RBAC for enterprise agents: same gates for chat, browse, and citations
How to design folder-scoped knowledge access for enterprise agents so chat, library browse, downloads, and citation PDFs share one entitlement model.
Part 3 · Jul 24, 2026 · 9 min read
Agent sessions vs the shell app: what should survive refresh
Where conversation state should live when a browser shell wraps a platform agent, and why refresh and quit behavior is an architecture choice.
Part 4 · Sep 4, 2026 · 9 min read
POC public vs MVP private: networking as architecture for agent apps
How to stage agent webapps from a public POC to a private MVP without pretending env files are a network design.