Posts tagged: identity
Learning How opencode Works by Hosting It for an Audience of One
I got curious about how opencode works, so I hosted it myself at tui.nurazhar.com with exactly one authorized user: me. A small Clojure gateway in front, free Zen quota behind.
I Built a PAM Audit CLI to Learn Identity the Hard Way
idira-audit-clj is a zero-dependency Babashka CLI that audits privileged estates for orphaned accounts, dormant privilege, and stale tokens — built AI-assisted, disclosed honestly, tested deterministically.
Money is More Than a Database Row — Security Lessons from Financial Systems
A security-focused explanation of why financial systems need authorization, auditability, and controlled state transitions in addition to database storage.
My AI Agent Finally Has a Way to Ask Permission — Singpass CIBA on FAPI 2.0
Singpass's CIBA flow lets an AI agent ask for consent through your phone — no browser, no redirect. This is me learning in public about the state-asserted consent layer agents will need.
Cloudflare Just Reinvented My Agent Identity Layer — and That's a Relief
Cloudflare's web-bot-auth signs agent HTTP requests with RFC 9421. I built the same idea on BSV. This is me learning in public about what separates the two.
Your Agent Fleet Needs a Sheepdog — A Personal IAM Control Plane
When one assistant becomes dozens of sub-agents, the architecture breaks without a control plane. The sheepdog pattern — a personal IAM/PAM layer — is how you keep a fleet safe.
One Language. One Ledger. How Clojure + BSV Is All You Need for Sovereign AI Agents
Every multi-agent architecture I've seen has the same problem: **too many moving parts held together by trust you can't verify**.