AI Agents Need an Identity Layer, Not a Bypass
A practical way to think about delegated identity, scoped tool access, reliable context, revocation, and audit when AI Agents move into production.
Read articleNotes
Notes from production.
Notes on identity, access, integrations, AI Agents, and the decisions behind reliable systems.
Latest notes
VerifyID: Identity Verification for Onboarding and Recovery
How VerifyID gives new users and locked-out users a trusted path into the identity provider your organization already uses.
Read articleMIM to Entra ID: Move in Phases, Not Promises
A practical way to move from Microsoft Identity Manager toward Entra ID Governance without betting everything on one migration window.
Read articleIdentity Platforms Break in the Gaps
How identity platforms drift from clean diagrams into production reality, and what to design before operations depend on them.
Read articleWhen to Modernize a Legacy Integration Layer
The warning signs that integrations have become the product risk, and how to modernize without stopping the business.
Read articleWhat Makes a Useful Engineering Discovery Sprint
How to turn a vague platform problem into decisions, milestones, and a first slice people can believe in.
Read article