DCR at Scale: Auth0, Client Lifecycle, and the Cleanup Problem
Dynamic Client Registration is great for agents, but it creates an operational problem: orphaned OAuth clients. How Auth0 Actions and metadata can solve client lifecycle management.
Articles
Designing a ReBAC System with AuthZEN and OPA
How I'm building a relationship-based authorization system using a single tuple store, an AuthZEN-compliant PDP, a custom OPA builtin in Go, and Redis caching — with a PAP accessible via MCP.
AuthZEN: Finally a Standard for Authorization APIs
AuthZEN is an OpenID Foundation spec that finally standardizes how apps communicate authorization decisions — and I'm building on it.
DCR and the Agent Era: Why Static Credentials Are Dead
Dynamic Client Registration enables ephemeral credentials for agents. Understand why DCR matters for MCP, why static credentials are obsolete for agents, and how to implement it.
Three Agents I'm Building in 2026
Building three specialized AI agents: Product Manager, MVP builder, and Content Discovery for autonomous work delegation.
The Shift: From Software to Systems
From engineer to manager to building Agentic AI systems that make complex enterprise systems accessible to everyone.
The Mental Shift: From Engineer to Engineering Manager
The mental shift from engineer to manager: measuring success through others and working with incomplete information constantly.
SCIM: The User Provisioning Standard
SCIM automates user lifecycle management. Understand what SCIM does, why enterprises need it, and when to implement it alongside SAML.
OIDC: OAuth's Identity Layer
OIDC adds authentication to OAuth 2.0. Understand why OAuth left a gap, how OIDC fills it, and when to use OIDC vs SAML.
SAML in 2023: Still Here, Still Useful
SAML is old, but enterprises still need it. Understand when to implement SAML, why enterprises demand it, and how it differs from OIDC.
Golang on Doom Emacs
Setting up Doom Emacs as a productive Golang editor with navigation, documentation, syntax checking, and testing.
Supporting Multiple Git/Github Accounts
Configuring SSH and Git to support multiple Github accounts for work and personal development projects.
On becoming a Certified Kubernetes Application Developer
My journey to becoming a Certified Kubernetes Application Developer using daily routines and focused study sessions.