[object Promise]

## Blog

- [Auth for BYOC apps, part two: when the client is an agent](https://alien.dev/blog/auth-for-byoc-agents): Control plane auth answers whether a person may reach a deployment. When the software inside the deployment acts on its own and talks to the outside world, it needs an identity of its own.
- [Authentication for BYOC apps](https://alien.dev/blog/byoc-authentication): When your app runs in the customer's cloud, where does login happen and where do API keys live? Auth stays in your control plane; the data plane only verifies tokens.
- [The agent nobody operates](https://alien.dev/blog/the-agent-nobody-operates): Most B2B products ship a component that customers run inside their own environment. It usually has no owner, no release process, and more access than anything else you ship.
- [What is BYOC? Bring your own cloud, explained](https://alien.dev/blog/what-is-byoc): BYOC means the vendor's software runs in the customer's cloud account while the vendor still operates it — and the second half is the part people miss.