Post
agents should just use atproto, not "agent atproto". this means giving agents access to everything: record api, oauth apps, browser logins, CLI tools, whtaever they need but what they can do with it should be lexicon- and policy-driven, fairly standardized, easy to audit, and have good safety
0 reposts6 likes
didbot does this by having all agent writes go through a policy engine, which can express things like "don't reply to people with AI opt outs" or "don't DM anyone" even if not present in the prompt / if the prompt gets injected not possible to do this on any other social media platform
pds.did.botpds.did.bot