Identity · Security · Engineering
Product notes and implementation essays for teams shipping tenant identity, delegated agent access, OAuth, and account security.
Design a support workflow that gives an AI agent read access to one customer's records for fifteen minutes, with explicit approval, application resource checks, and a way to stop access early.
Continue readingFollow a password reset beyond the email link, through account privacy, competing requests, existing sessions, and the recovery decisions an application has to own.
Continue readingA four-action email-verification trace shows where model checking ends, what implementation replay adds, and why a passing model alone cannot establish a software guarantee.
Continue readingLogin looks like a button, but modern identity systems depend on authentication, sessions, tokens, authorization, OAuth, SSO, wallet signatures, and agent identity.
Continue readingTenant identity needs audit-ready defaults that preserve operational context for applications, administrators, webhooks, policy changes, and incidents.
Continue readingModel AI agent access as bounded delegated work with explicit scope, expiry, approval context, and audit-ready ownership.
Continue readingUse a production-shaped hosted login checklist to validate redirects, sessions, tenant policy, branding, recovery, and operations before launch.
Continue reading