Independent practitioner publication Governance × Access × Agentic Identity
Identity is the control plane.
Practical notes on identity governance, access architecture, non-human identities, and AI agents.
Identity Governance
Access reviews, IGA architecture, lifecycle controls, and governance that holds up in practice.
The Certification That Never Was
A fictional story about a real IGA failure pattern: access reviews that create evidence of governance without governance actually happening.
Cloud Breaches Don't Start in the Cloud — They End There
Most compromises begin outside the cloud, then ripple inward through identity, federation, and trust chains.
The Guest User Blind Spot: Lessons from the Salesloft Breach
When an attacker can add a guest account without approvals or alerts, it's not a breach problem — it's an identity governance problem.
Agentic Identity
AI agents, non-human identities, delegation, and the emerging authorization layer.
Engineering
Open-source tools, system design, and notes from the build.
Why I Built gh-iga: Open-Source Identity Governance for GitHub
GitHub access grows quietly across people, apps, keys, secrets, and automation. I built gh-iga to make that access visible—and to be honest when a scan is incomplete.
Deployment Pain: Where Dev Truly Meets Ops
It worked on my machine. Then it didn't. Every engineer has lived this gap — and it's where the real work of bridging dev and ops begins.
Perspectives
Direct arguments about identity, trust, technology, and the work around them.
Your Verified Identity Is Now a Liability
AI agents, deepfakes, and synthetic profiles are dissolving the old boundary between verified identity and actual human trust.
Your Situation Isn't as Unique as You Think
The hidden cost of believing the rules don't apply to you.
The Missing Middle: Where Humans and AI Meet
The real opportunity in the age of generative AI isn't on either extreme — it's in the space where humans and machines work together.
Career & Growth
