I build identity and authorization infrastructure. For the last three years I've been shipping AI systems into production inside a global enterprise, and getting people to use them. My working thesis: as agents take over more of the work, identity, authorization, and audit become the layer everything else depends on.
Twenty-five years building enterprise software, including identity infrastructure (OAuth, OIDC, SAML, Ping Identity), production AI systems, and B2B commerce. MPS, NYU Interactive Telecommunications Program.
Currently working on: delegated authorization for AI agents, OAuth and token exchange, auditability, and the infrastructure that makes agent deployment survivable.
Architected and shipped the internal AI platform for a global publishing house: FastAPI, React, Azure OpenAI, RAG over internal content, JWT-based access control, and per-user usage logging. In production across editorial and business workflows.
Built a tool for managers and QA that turns the artifacts already produced during development, including tickets, requirements, and designs, into structured test specifications. The goal is to make expected behavior and coverage explicit before testing begins, while keeping the resulting tests traceable back to the material they came from. QA and developers are using it on current work.
Built an extensible review system that scans applications, identifies and classifies findings, and can remediate findings that are suitable for automated correction. Accessibility is the first implemented domain, using Playwright-based WCAG 2.1 AA checks; the same reviewer interface supports security and code-quality analysis. Results are emitted as SARIF for CI and exposed through a Claude Code plugin so review, triage, and remediation happen inside the developer workflow. In use for accessibility remediation and being introduced across the engineering organization.
A queryable model connecting architecture, requirements, implementation, tests, and design artifacts across an enterprise application portfolio. Developers trace dependencies and impact; managers, QA, design, and security query the same model for coverage, ownership, and how a change propagates. Developed with the analytics team.
Migrated two legacy authentication systems into a unified Ping Identity / DaVinci architecture serving four enterprise applications, including the delegation and flow design for B2B commerce login and user management.
Senior engineer on the rebuild of a nine-figure B2B ordering platform: headless commerce, checkout and authorization flows, and the integration seam between commerce and identity.
A research and writing vault framework: articles, sources, talk pages, and a librarian layer for compaction and navigation. Built for thinking in public with provenance intact.
Agent-first authoring surface that treats a web app as a graph of components, props, and effects.
A multi-agent simulation framework implementing active inference (FastAPI, Mesa, PyMDP, Next.js). Agents with resource dynamics operate a simulated economy; the substrate for the stability research below.
Alongside the engineering work I keep an independent research practice. Current questions: how to hold agent behavior predictable across long interactions, and how to design human and agent interaction for deliberate use rather than engagement. One project is patent pending. The others live as prototypes and writing.