Now

Small advisory practice for mid-market companies that want phishing-resistant identity, not another dashboard. First pilot engagement in motion.

Conditional access and identity at Microsoft scale. The boring controls that actually move risk.

A few small Next.js and React apps in evenings. Half product, half lab — testing where AI coding tools still ship insecure defaults.

Agentic identities. AI in the SDLC. The Next.js server/client seam where most teams now leak data without noticing.

The Unaccountability Machine. Re-reading Cal Newport on slow productivity.

Running. Coffee at 6am. No meetings before 10.