Authentication and authorization alone don't achieve tenant isolation. A user can be fully authenticated, fully authorized for their own tenant — and still access another tenant's resources if isolation isn't enforced at the infrastructure level. This isn't theoretical.

Model Context Protocol (MCP) is becoming the standard for connecting AI agents to enterprise systems. But its authorization model has a fundamental problem.

Only 22% of teams treat AI agents as independent identities. The rest? Shared API keys. That stat comes from the 2026 State of AI Agent Security Report — and it should terrify every CISO reading this.

I don't quite know how Marathon's graphic realism aesthetic fits into enterprise software yet, but I can't help wanting every UI I touch to have it. It's just gorgeous.

Broken access control has been the #1 risk on the OWASP Top 10 for two consecutive releases (2021 and 2025). 100% of applications tested by OWASP researchers had some form of broken access control.

You should see my schedule; I'm positively bedeviled with meetings, etcetera.

AI agents don't ask for permission twice. They make a decision, call your API, access your data. If your access control drifted out of sync last week, you won't know until it's already happened.

Just shipped the new InferaDB website — really proud of how the developer docs, blog (Dispatch), and changelog turned out. inferadb.com First time working with animating SVG. Love the subtle effect it gives Dispatch posts when they load in and on hover.

OK, I really really loved "Good Luck, Have Fun, Don't Die". Tremendously fun movie

Incredible to see my PHP framework (PSR Discovery) just passed 8 million downloads!

I couldn't sleep last night, so I tinkered around and built a tool I've wanted for a while: a no-fuss code coverage reporter for GitHub Actions. Tools like Codecov are convenient, but I think the added overhead of an external service dependency and secrets is overkill.

Your authorization system can't prove it worked correctly yesterday. Try it. Pull your logs and database backups. I'll wait.

"We deploy in eu-west-1" is not a data residency guarantee. A deployment configuration is a policy. A consensus protocol that physically can't replicate data outside a jurisdiction is a guarantee. One satisfies an auditor's question. The other satisfies the follow-up.

Your authorization layer is the only part of your infrastructure you can't verify — and it's making every access decision. You've got observability everywhere. APIs, databases, services — all instrumented. But auth? It's a black box. Outputs "allow" or "deny" and you trust it.

Marathon is the first extraction shooter I've found that doesn't feel like a second job. Spent all weekend playing with my partner and friends. The cyberpunk aesthetic is stunning — combat is tight, and even short sessions feel rewarding. Most fun I've had with the genre!

Zero trust for identity? Check. For devices and networks? Yep. For workloads? Of course. For the authorization layer that actually enforces access decisions? Crickets.

I'm building a little game engine in Metal/Vulkan from scratch with Claude Code (just for fun) and I decided I wanted to integrate a big throw back to my early gamer days — Starsiege Tribes skiing. I can't tell you how overjoyed I was that Claude understood this concept thoroughly.

Ever wonder what's actually happening inside your authorization system? Traditional setups operate like black boxes: permissions go in, yes/no comes out, and you just hope nothing's been tampered with. We're changing that.

At the beginning of each workday, each player draws 7: three ‘Just Checking In’s, two ‘No Rush On This’s, one ‘Per My Last Email,’ and a legendary: ‘Let Me Know How I Can Help.’ You may play any number of kindness spells this turn.

Love building terminal UIs — it scratches an itch that's hard to define. Coming of age in the 90s hacking scene left an impression on me, I think. This is from @InferaDB CLI's `dev status --interactive` command. It's built using our Rust-native TUI framework inspired by Bubble Tea, called Ferment.

In Chicago this week visiting with our dear friends 😊

I have the sudden urge to build a MUD with Rust

"Startup" (the series) was a delightful surprise. I recently binge-watched all three seasons. It's a bummer we won't be getting a Season 4!

Finding something you're so passionate about that you can envision dedicating the next decade to it is rare and exciting. The first for me was my fiancé; the second is @InferaDB.

Hot take: Rust is the future of software development, and I'm shaping InferaDB to be a predominantly Rust-based company from the ground up.

Just set up our new Discord server for InferaDB! Going forward, it'll be our central hub for our developer community to engage directly with the team, exchange best practices and tips and tricks, and where we'll deliver updates on new features, offer official resources and tutorials.

Exciting day! We have our first VC calls for InferaDB lined up over the next couple of weeks, starting with our first call today. Wish us luck! 😊

Code is more than a set of machine instructions; it's a message to future developers, including ourselves. It’s a tool for clear communication over time, capturing our intentions, reasoning, and shared understanding.

I'm so excited about what we've been building at InferaDB. For years, I've seen developers struggle with authorization. It's more often than not a bottleneck that slows down innovation and compromises security. I spent five years in the space re-thinking the approach, and InferaDB is that solution.

What on earth did they do to Affinity? This new UI is a nightmare. It's great that the core features are now free — genuinely awesome! But I was more than willing to pay for a seamless experience. A cluttered UI, even at no cost, isn't exactly a crowd-puller.

Sneakers (1992) has held up surprisingly well

Both WHOOP and OURA have launched new, extensive blood test panel programs. I explored these options to highlight the differences and help you determine which one offers the best value for your specific needs.

The more I work with TanStack, the more I fall in love. Its unparalleled quality and exceptional developer experience are truly inspiring. Every library should aspire to be such a joy to use.

Apple’s rebrand of TV+ makes sense. It’s felt like they’ve been refining the Apple TV+ app UI to eventually replace the dull app launcher experience of the current home screen for quite a while now — the new name seems to reinforce that inevitability. www.techmeme.com/251013/p26#...

Just released OpenFGA Python SDK v0.9.7 with some DX improvements and bug fixes for working with custom headers. Give it a try and let us know what you think! github.com/openfga/pyt...

Happy iPhone day to those that celebrate

I figured The Browser Company (of Arc and Dia fame) being acquired was an inevitability, but I did not have Atlassian on that bingo card.

I try to start each week by reflecting on what went well and what didn't. Just a few sentences of reflection help me uncover patterns often missed in the rush. It's a simple habit with huge returns. Improvement is largely about recognizing what needs to change.

Another day of guessing: am I sick with bug, is it just allergies, or am I getting a sinus infection? This past week has been a ride, man.

Another workout complete 😮‍💨

Building with TanStack Start feels like how React *should* have felt all along. If you want transparent, no-BS SSR, you should try it on for size. It's certainly solving a lot of headaches for me and feels like a breath of fresh air.

Every Sunday, I dedicate 15 focused minutes to gain clarity and direction for the upcoming week, setting a positive tone for the days ahead.

Goals hit different when they’re tied to who you are. Not “I will write,” but “I’m a writer.” The label isn’t just semantics-it drags your habits into alignment. Sounds small, but it’s the difference between dabbling and becoming.

Be a catalyst, not a constraint. Recognize the unique abilities of each person; every team holds unrealized potential. Set more challenging goals. Foster open dialogue. Delegate responsibility swiftly. Small changes, significant outcomes.

Identify a strength in someone today that isn't in their job description. Highlight it. You'll be amazed at how much engagement and confidence it ignites. Multipliers recognize and celebrate hidden talents. Sometimes, that's all it takes to transform a career path.

Modern apps encourage your brain to enjoy constant novelty, enhancing your focus with quick dopamine hits. This isn't a personal shortcoming; the system is designed to engage you. Strengthening attention involves retraining both your brain chemistry and your environment.

Next time someone brings you a problem, try asking, "What do you think?" It's a dead simple habit that fosters independence and trust. Leaders who offer advice too quickly deprive their team of growth opportunities. Resist the urge to fix; watch people step up.

Fear of failure is normal, but regret weighs more than embarrassment. You fail the moment you choose not to try. The future belongs to those who risk looking foolish and do it anyway.

Centralizing AI memory (think: MCP + markdown) is quietly revolutionary. It seamlessly syncs notes and context across tools, eliminating the need to repeat yourself. The only downside? Mobile still lags behind. Universal, editable memory must be the next step.

Everyone claims, "I don't have time," but there's always room for distractions. The truth is, it's not about time. It's about urgency. Make your dreams urgent, or you'll watch them slip by while you're busy.