Topics
Every essay grouped by the problem it addresses.
AI oversight and regulation
Every emerging AI regime asks a version of the same question: which natural person was accountable, and what did they see. These essays map the statutory language onto re
Access governance and certification
Access certification produces an artefact that auditors rely on and reviewers produce without reviewing. These essays cover decidability, attestation budgets, SoD excepti
Agent tool-call gating
An agent holding credentials can act. Nothing in the stack records which human authorised the act. These essays cover delegation chains, tool approval scope, kill-switche
Aviation and airworthiness identity
Airworthiness rests on signatures that are, in production, logins to a maintenance system. These essays cover release certificates, correction chains, dispatch release an
Category comparisons
Detection, personhood, decentralised identity and agent payment rails each answer a real question. These essays examine which question, and what each one structurally can
Courts and fiduciary identity
Trust accounts, court orders and notarial acts all rest on documents a verifier cannot test. These essays cover disbursement authority, filing provenance and evidence col
Cyber insurance and risk transfer
Underwriters price controls they cannot verify, and sub-limit the losses they cannot underwrite. These essays cover warranties, questionnaires, claims evidence and what a
Defense industrial base identity
Safeguarding obligations flow down by contract clause and are evidenced by attestation rather than observation. These essays cover CUI access, deemed export, affirmations
Digital asset custody
The largest custody losses did not involve stolen keys. They involved signers approving one thing and signing another. These essays cover payload binding, blind signing,
Education and credential identity
Credential verification is an institution-to-verifier lookup that requires the institution to exist and answer. These essays cover ghost students, refund destinations, as
Freight, cargo and customs identity
Cargo theft is an identity failure at the dock. These essays cover fictitious pickup, double brokering, container release, customs filing and payment diversion in freight
Gaming and consumer marketplace identity
Consumer platforms enforce uniqueness and self-exclusion with matching rules the user controls. These essays cover friction allocation, payout redirection, review integri
Grid, water and OT identity
Operational technology protocols carry no principal at all, so authorisation stops one hop short of the equipment. These essays cover clearances, vendor sessions, lockout
Hospital and clinical identity
Clinical systems optimise for speed at the bedside, which is correct and has a measurable attribution cost. These essays cover shared workstations, break-glass access, ve
Insurance and payer identity
Beneficiary changes, claim payouts and provider enrolment are all profile edits with payment consequences. These essays cover designation integrity, claimant authorisatio
Machine and signing identity
Machine identities outnumber humans by an order of magnitude and almost none has a human behind it. These essays cover ownership, revocation latency, federation and signi
Payment release authorization
Business email compromise and deepfake impersonation both end at the same place: somebody releases a payment. These essays examine the release step itself — what an appro
Pharma and GxP identity
A regulated signature carries personal legal liability and is frequently a username and a password. These essays cover batch release, out-of-specification results, eConse
Private capital and fund identity
Capital calls, subscriptions and transfers move very large sums on PDFs and email. These essays cover drawdown notices, instruction authority, secondaries and client mone
Privileged identity and account recovery
The dominant enterprise intrusion path is a phone call to a help desk, followed by a session that never re-authenticates. These essays cover reset procedures, step-up at
Public sector identity
Improper payments concentrate in fields that redirect money and are maintained as records. These essays cover benefit redirection, contracting authority, grant certificat
Receipt cryptography and standards
What makes a record still verifiable in a decade: canonicalisation, key publication, revocation and a verifier small enough to audit. These essays cover the primitives an
Remote workforce identity
Identity is verified once at hire, and the employment relationship lasts years. These essays cover the gap: proxy operatives, deepfake interviews, behavioural monitoring
Research, datasets and methods
Taxonomies, maturity models, exposure calculators and benchmark methodology — the reference material behind the rest of the writing.
Software supply chain authorization
Provenance tooling answers where an artefact came from. It does not answer who decided to ship it. These essays examine change control, package publishing, infrastructure
Telecom and subscriber identity
Carrier rules harden the carrier's side of a SIM change and never ask the subscriber for anything. These essays cover porting, eSIM, IoT fleets, interconnect and cal
Title, escrow and closing wires
A residential closing concentrates a household's savings into one irreversible transfer arranged by email. These essays cover wire instructions, payoff demands, cons