Posts tagged: iam
What Stripe Radar Teaches About Money-as-Code — A Security Engineer's Translation
What Stripe Radar rules can teach security engineers about explicit payment controls, and where the analogy to OPA/Rego stops.
Why I Replaced 200 Lines of Babashka with 35 Lines of Rego
How declarative IAM validation using OPA/Rego replaced imperative Clojure security checks — and why functional programmers already understand policy engines.
Your Agent Fleet Needs a Sheepdog — A Personal IAM Control Plane
When one assistant becomes dozens of sub-agents, the architecture breaks without a control plane. The sheepdog pattern — a personal IAM/PAM layer — is how you keep a fleet safe.
Six Security Automation Tools in Babashka: A Zero-Dependency Monorepo
How I built six security automation assistants as a babashka monorepo with pure functions, a self-contained CSV parser, and 175 assertions of golden tests — zero external dependencies, zero linter warnings, zero bugs.