https://www.c1.ai/engineering/ Recent content in Engineering on ConductorOne en-us Tue, 11 Aug 2026 13:00:00 GMT https://www.c1.ai/engineering/designing-connection-authentication-for-c1-bridge Tue, 11 Aug 2026 13:00:00 GMT https://www.c1.ai/engineering/designing-connection-authentication-for-c1-bridge How C1 Bridge uses keepalive-based connection authentication to make long-lived private-network connections revocable without putting bridge authentication on every request. https://www.c1.ai/engineering/agent-tui-structured-terminal-access-for-ai-agents Tue, 30 Jun 2026 17:00:00 GMT https://www.c1.ai/engineering/agent-tui-structured-terminal-access-for-ai-agents agent-tui runs terminal programs on a PTY and exposes the rendered screen as text or an outline with stable refs. Agents can drive live TUIs, including other AI agents, by snapshotting, pressing keys, and waiting for screen state. https://www.c1.ai/engineering/scaling-dynamo-throughput-via-pk-sharding Thu, 25 Jun 2026 13:00:00 GMT https://www.c1.ai/engineering/scaling-dynamo-throughput-via-pk-sharding How we scaled DynamoDB throughput at C1 by implementing calculated partition key sharding. A deep dive into our solution using protoc-gen-dynamo, hash-based shard distribution, and parallel read strategies to break through DynamoDB's per-partition limits while maintaining developer ergonomics. https://www.c1.ai/engineering/evolution-of-our-ai-agentic-engine Wed, 17 Jun 2026 07:00:00 GMT https://www.c1.ai/engineering/evolution-of-our-ai-agentic-engine We've rewritten C1's AI agent loop three times. The path starts with a single hand-written v1 assistant, moves to one shared engine, and ends with c1aw: a single governed loop with dynamic tools, per-user access gating, and real memory. https://www.c1.ai/engineering/how-we-cut-our-embedding-costs-in-half-and-shrank-storage-by-50 Fri, 13 Mar 2026 07:00:00 GMT https://www.c1.ai/engineering/how-we-cut-our-embedding-costs-in-half-and-shrank-storage-by-50 How C1 refactored its embedding pipeline to achieve ~50% reduction in Bedrock inference costs, 50% reduction in vector storage, and embeddings that refresh in hours instead of days. https://www.c1.ai/engineering/fault-injection-for-complete-branch-coverage Fri, 20 Feb 2026 02:00:00 GMT https://www.c1.ai/engineering/fault-injection-for-complete-branch-coverage Error handling branches are invisible to valid inputs. Fault injection makes them visible. https://www.c1.ai/engineering/proving-equivalence-with-egraphs Fri, 20 Feb 2026 01:00:00 GMT https://www.c1.ai/engineering/proving-equivalence-with-egraphs Two permission derivations can look completely different and compute the same access. E-graphs find out. https://www.c1.ai/engineering/every-branch-condition-compiles-to-a-dfa Fri, 20 Feb 2026 00:00:00 GMT https://www.c1.ai/engineering/every-branch-condition-compiles-to-a-dfa Every branch condition in every connector compiles to a deterministic finite automaton. Here's how that enables static branch prediction. https://www.c1.ai/engineering/one-mock-server-twelve-protocols Thu, 12 Feb 2026 00:00:00 GMT https://www.c1.ai/engineering/one-mock-server-twelve-protocols A YAML-driven mock server that speaks twelve protocols through one interface. Adding a new connector means writing a config file. https://www.c1.ai/engineering/formally-verifying-identity-connectors Wed, 11 Feb 2026 00:00:00 GMT https://www.c1.ai/engineering/formally-verifying-identity-connectors Connector verification reduces to three set operations. Here's the framework that proves two hundred identity connectors correct. https://www.c1.ai/engineering/six-shapes-of-authorization Tue, 10 Feb 2026 13:00:00 GMT https://www.c1.ai/engineering/six-shapes-of-authorization We axiomatized over 1,800 permission systems. Every one of them reduces to one of six shapes. https://www.c1.ai/engineering/splitting-ai-agents-to-contain-prompt-injection Thu, 05 Jun 2025 13:00:00 GMT https://www.c1.ai/engineering/splitting-ai-agents-to-contain-prompt-injection Go behind the scenes of how we built guardrails into Thomas, C1's AI agent—and the industry's first multi-agent identity security platform. This blog breaks down our architecture, trust models, and sandboxing techniques that ensure agents can automate identity governance safely, securely, and transparently.