Now

A now page - a snapshot of what I'm focused on at this point in time. Updated manually when things shift. Last updated: August 2026.

Day job

Senior Software Engineer at WSO2, focused on Identity and Access Management and enterprise integration - Most of what I know about OIDC, Oauth2, federation, and IAM comes from this work.

Writing

Working on a few articles on IAM, software architecture and Agentic AI topics.

Just published a piece on enforcing a tenant isolation rule with a Roslyn analyzer - moving a business rule out of developer memory and into every build.

Before that, a breakdown of the six authorization changes landed in the 2026-07-28 MCP spec.

Building

Contributing to mcp-remote, the proxy that lets stdio-only MCP clients reach remote servers. My fix for the OAuth callback port crash (#262) shipped in 0.1.39.

Reading

Reading up on the agentic AI - Not just because of the hype, I need to understand how they work.

Focusing on how agents are being structured, where they break, and what that means for the systems they connect to.