
Recent Activity
May — Issue #1

Maps human Zero Trust verification signals onto AI agents, names exactly where each holds and breaks, and surfaces the two buyer camps.

Compares static roles, runtime ABAC, and JIT elevation for scoping agent permissions, with field-ready language for buyer conversations.

Compares how cleanly you can trace "who authorized that action" across service accounts, bots, and AI agents, with field-ready language.

Maps how audit trails degrade from traditional IDAM through agent orchestration to model reasoning, equipping AEs to name each gap precisely in buyer conversations.

AI agents revive the static-credential antipattern at scale. Here's the mechanism, where vault intuition applies, and where it breaks.

Maps prompt injection onto session hijacking, CSRF, and XSS, showing where each analogy holds, where it breaks, and what to say in buyer conversations.

OAuth delegation maps cleanly onto agent authorization until scope, consent, and identity break in ways your next buyer conversation will surface.

AI agents act without identity governance, and your IDAM expertise is the missing piece in every buyer's architecture conversation.

Maps every AI concept from lessons 3.1–3.7 to the authorization question your buyer hasn't named yet, with vocabulary collision tables for calls.

A constraint-driven comparison of cloud API and on-device inference patterns, built so sellers recognize which buyer problem points where.

Function calling formats the request, MCP transports it, Skills decide if it should happen. Three layers, zero governance built in.

Explains how enterprises consume AI models through hyperscaler APIs, why token pricing hides real costs, and how compliance inheritance drives the pattern.

Open-weight models explained mechanically: what the weights contain, what self-hosting actually costs, and where your IdP intuition misleads you.

How to distinguish workflows from agents in buyer conversations, name the failure modes, and right-size the architecture.

Separates demo RAG from production RAG so you know what breaks at scale and what to ask buyers.

Copilots inherit user permissions and exercise all of them at once, turning years of invisible oversharing into immediate exposure.

Maps AI deployment patterns to the identity and governance questions each one raises, giving enterprise AEs a diagnostic lens for buyer conversations.

A decision framework mapping AI deployment patterns to their identity implications, built for fast pattern recognition in discovery calls.

Compares what vector, keyword, and hybrid retrieval each find and miss, including where document-level permissions silently break underneath.

MCP loads every tool definition upfront, burning context budget; Skills load on demand. Here's the token math and field language.

Compares RAG and agentic search as retrieval strategies, maps each to buyer data environments, and provides field-ready conversation language for AEs.

Three infrastructure failures routinely blamed on broken models, diagnosed through their mechanics, mapped to production fixes, and translated into field-ready buyer language.

Model emits JSON, harness carries the credential. How the single-turn tool-call loop actually splits, phase by phase, for buyer conversations.

MCP is the wire protocol connecting AI tools. The governance layer above it is still being built. Here's how far your OAuth instincts carry you.

AI systems are infrastructure executing model requests with real credentials — the mechanical frame your IDAM instincts map onto.

Two encoding formats for the same mechanic: how the model asks for a tool call, why the format choice matters operationally, and where your IDAM intuition breaks.

Reference map of the four mechanical layers behind every AI agent, organized so identity questions land on the right component.

A field-ready breakdown of predictive versus generative AI, with scenario-mapped buyer language, NIST governance splits, and honest tradeoff framing.

Software failures announce themselves; model confabulation doesn't. How to use NIST's preferred vocabulary and reframe the risk for buyers.

Explains how LLMs actually work mechanically, then maps exactly where your IDAM intuition helps in AI conversations and where it misleads.

Maps seven AI vocabulary collisions to IDAM concepts across four mental model clusters, marking where each analogy holds and where it breaks.

Neural networks are layered math, not inspectable rules. Your IDAM audit intuition breaks here, and knowing exactly where matters.

Maps the AI adaptation spectrum to your IDAM configuration instincts so you can translate buyer "customize" requests accurately in live conversations.

LLM tokens are billing units, not credentials. Covers context windows, inference costs, and why AI spend attribution is an unsolved identity problem.

ML systems produce probabilistic outputs, not deterministic ones. Your testing, auditing, and incident response instincts need recalibration.

Maps where IDAM vocabulary collides with AI vocabulary in buyer conversations, and previews the section that resolves each collision point.

Five hosting arrangements compared across jurisdiction, legal exposure, breach surface, audit capability, and agentic latency so you know what changes when the same model runs somewhere else.

Profiles four current models as physical objects with specific file sizes, VRAM requirements, and hardware tiers that make deployment conversations concrete.

Same model weights, four hosting locations, completely different data paths and legal exposure. Here's what to say in the room.

Breaks down what "open" actually means on the license page so you stop saying open source when you mean open weights.

Agent context accumulates every prior turn, making costs quadratic and wildly unpredictable. The mechanism behind the budget surprises, and what to listen for.

Maps training, fine-tuning, and prompting onto cost, persistence, and time so AEs can navigate buyer AI customization conversations with precision.

Structured reference scaffold consolidating model files, GPU requirements, licensing traps, hosting tiers, token economics, and customization approaches for deal prep.

Parameter count times bytes per parameter sets your hardware floor. Quantization cuts that floor dramatically, with less quality loss than your deterministic instincts expect.

A trained model is a fixed file; every decision your buyer actually cares about lives in the deployment envelope around it.