<?xml version="1.0" encoding="UTF-8"?><oembed><type>video</type><version>1.0</version><html>&lt;iframe src=&quot;https://www.loom.com/embed/bc9c8452c8974352b537f9d2602c9f77&quot; frameborder=&quot;0&quot; width=&quot;1662&quot; height=&quot;1246&quot; webkitallowfullscreen mozallowfullscreen allowfullscreen&gt;&lt;/iframe&gt;</html><height>1246</height><width>1662</width><provider_name>Loom</provider_name><provider_url>https://www.loom.com</provider_url><thumbnail_height>1246</thumbnail_height><thumbnail_width>1662</thumbnail_width><thumbnail_url>https://cdn.loom.com/sessions/thumbnails/bc9c8452c8974352b537f9d2602c9f77-78d935f89188b4cd.gif</thumbnail_url><duration>130.909</duration><title>Ember Daemon Grants with Live Caps 🔐</title><description>Today I’m showing the Ember daemon, a local first system that keeps credentials yours without hardcoded keys or blanket access. I register a biometric passkey and create a grant with four statements, including an anthropic credential with a five cent spend cap, 75 seconds of wall clock, and GitHub credentials. You can watch the per task cost gauge tick live. When the cap or scope is exhausted, Anthropic stops calls while GitHub can still push partial PRs until I revoke it. No viewer action is requested.</description></oembed>