Independent practitioner publication Governance × Access × Agentic Identity
Identity is the control plane.
Practical notes on identity governance, access architecture, non-human identities, and AI agents.
Identity Governance
Access reviews, IGA architecture, lifecycle controls, and governance that holds up in practice.
The Evolution of Identity Governance and Administration (IGA) Over the Years
How IGA evolved across seven eras—from manual directory governance and compliance reviews to continuous governance for humans, machines, and AI agents.
The Certification That Never Was
A fictional story about a real IGA failure pattern: access reviews that create evidence of governance without governance actually happening.
Cloud Breaches Don't Start in the Cloud — They End There
Most compromises begin outside the cloud, then ripple inward through identity, federation, and trust chains.
Agentic Identity
AI agents, non-human identities, delegation, and the emerging authorization layer.
The Agent Has Access. Who Owns the Agent?
Every AI agent needs a human owner, a declared purpose, bounded permissions, a review date, and a reliable way to shut it down.
Agent Governance Should Move to the Application Boundary
Instead of only governing which applications an agent can access, each application should decide which agents it trusts, what they may do, and how far their authority can travel.
Engineering
Open-source tools, system design, and notes from the build.
Why I Built gh-iga: Open-Source Identity Governance for GitHub
GitHub access grows quietly across people, apps, keys, secrets, and automation. I built gh-iga to make that access visible—and to be honest when a scan is incomplete.
Deployment Pain: Where Dev Truly Meets Ops
It worked on my machine. Then it didn't. Every engineer has lived this gap — and it's where the real work of bridging dev and ops begins.
Perspectives
Direct arguments about identity, trust, technology, and the work around them.
Your Verified Identity Is Now a Liability
AI agents, deepfakes, and synthetic profiles are dissolving the old boundary between verified identity and actual human trust.
Your Situation Isn't as Unique as You Think
The hidden cost of believing the rules don't apply to you.
The Missing Middle: Where Humans and AI Meet
The real opportunity in the age of generative AI isn't on either extreme — it's in the space where humans and machines work together.
Career & Growth
