CTO & Co-Founder @InferaDB.com — the Authorization Database. Previously Okta, Auth0, OpenFGA and Ushahidi.https://bsky.app/profile/evansims.comhttps://bsky.app/profile/evansims.com/post/3mkzctfiocb24Wonder Man was even better than I expected. Sir Ben Kingsly and Yahya Abdul-Mateen II never disappoint.04 May 2026 09:03 +0000at://did:plc:dvwv5cgcs54bxwsc2bx6mglm/app.bsky.feed.post/3mkzctfiocb24https://bsky.app/profile/evansims.com/post/3mkyp4cidqf23No one warned me Mr. Door was in The Night Manager04 May 2026 03:10 +0000at://did:plc:dvwv5cgcs54bxwsc2bx6mglm/app.bsky.feed.post/3mkyp4cidqf23https://bsky.app/profile/evansims.com/post/3mjsg3r4rfh2eHarness engineering18 Apr 2026 21:47 +0000at://did:plc:dvwv5cgcs54bxwsc2bx6mglm/app.bsky.feed.post/3mjsg3r4rfh2ehttps://bsky.app/profile/evansims.com/post/3mjpjrkt66m2sEveryone seems to remember that Icarus flew too close to the sun, but not that his father also told him not to fly too low and let the sea dampen his wings. We only ever tell half the story: the falling half. Hubris makes a better cautionary tale than mediocrity does.17 Apr 2026 18:15 +0000at://did:plc:dvwv5cgcs54bxwsc2bx6mglm/app.bsky.feed.post/3mjpjrkt66m2shttps://bsky.app/profile/evansims.com/post/3mjiblihwgm2oI always appreciate when Claude resorts to question and exclamation marks in its statements — it's reassuring knowing I'm not the only one deeply confused as to what's going on.14 Apr 2026 21:00 +0000at://did:plc:dvwv5cgcs54bxwsc2bx6mglm/app.bsky.feed.post/3mjiblihwgm2ohttps://bsky.app/profile/evansims.com/post/3miyyc4neeb2rAuthentication and authorization alone don't achieve tenant isolation. A user can be fully authenticated, fully authorized for their own tenant — and still access another tenant's resources if isolation isn't enforced at the infrastructure level. This isn't theoretical.08 Apr 2026 19:04 +0000at://did:plc:dvwv5cgcs54bxwsc2bx6mglm/app.bsky.feed.post/3miyyc4neeb2rhttps://bsky.app/profile/evansims.com/post/3mitjtobrdc2rModel Context Protocol (MCP) is becoming the standard for connecting AI agents to enterprise systems. But its authorization model has a fundamental problem.06 Apr 2026 15:02 +0000at://did:plc:dvwv5cgcs54bxwsc2bx6mglm/app.bsky.feed.post/3mitjtobrdc2rhttps://bsky.app/profile/evansims.com/post/3miin2cefqd2qOnly 22% of teams treat AI agents as independent identities. The rest? Shared API keys. That stat comes from the 2026 State of AI Agent Security Report — and it should terrify every CISO reading this.02 Apr 2026 07:00 +0000at://did:plc:dvwv5cgcs54bxwsc2bx6mglm/app.bsky.feed.post/3miin2cefqd2qhttps://bsky.app/profile/evansims.com/post/3mihiozimfe2qI don't quite know how Marathon's graphic realism aesthetic fits into enterprise software yet, but I can't help wanting every UI I touch to have it. It's just gorgeous.01 Apr 2026 20:09 +0000at://did:plc:dvwv5cgcs54bxwsc2bx6mglm/app.bsky.feed.post/3mihiozimfe2qhttps://bsky.app/profile/evansims.com/post/3mihen5d2ts2rBroken access control has been the #1 risk on the OWASP Top 10 for two consecutive releases (2021 and 2025). 100% of applications tested by OWASP researchers had some form of broken access control.01 Apr 2026 18:57 +0000at://did:plc:dvwv5cgcs54bxwsc2bx6mglm/app.bsky.feed.post/3mihen5d2ts2rhttps://bsky.app/profile/evansims.com/post/3mifbw3utam2jYou should see my schedule; I'm positively bedeviled with meetings, etcetera.31 Mar 2026 23:03 +0000at://did:plc:dvwv5cgcs54bxwsc2bx6mglm/app.bsky.feed.post/3mifbw3utam2jhttps://bsky.app/profile/evansims.com/post/3mif2t4czzb27AI agents don't ask for permission twice. They make a decision, call your API, access your data. If your access control drifted out of sync last week, you won't know until it's already happened.31 Mar 2026 20:56 +0000at://did:plc:dvwv5cgcs54bxwsc2bx6mglm/app.bsky.feed.post/3mif2t4czzb27https://bsky.app/profile/evansims.com/post/3miegr74hdr2lJust shipped the new InferaDB website — really proud of how the developer docs, blog (Dispatch), and changelog turned out. inferadb.com First time working with animating SVG. Love the subtle effect it gives Dispatch posts when they load in and on hover.31 Mar 2026 14:57 +0000at://did:plc:dvwv5cgcs54bxwsc2bx6mglm/app.bsky.feed.post/3miegr74hdr2lhttps://bsky.app/profile/evansims.com/post/3mha5gcs75e23OK, I really really loved "Good Luck, Have Fun, Don't Die". Tremendously fun movie17 Mar 2026 04:34 +0000at://did:plc:dvwv5cgcs54bxwsc2bx6mglm/app.bsky.feed.post/3mha5gcs75e23https://bsky.app/profile/evansims.com/post/3mgpncpdujw2uIncredible to see my PHP framework (PSR Discovery) just passed 8 million downloads!10 Mar 2026 15:03 +0000at://did:plc:dvwv5cgcs54bxwsc2bx6mglm/app.bsky.feed.post/3mgpncpdujw2uhttps://bsky.app/profile/evansims.com/post/3mgnjzkcnud2uI couldn't sleep last night, so I tinkered around and built a tool I've wanted for a while: a no-fuss code coverage reporter for GitHub Actions. Tools like Codecov are convenient, but I think the added overhead of an external service dependency and secrets is overkill.09 Mar 2026 18:59 +0000at://did:plc:dvwv5cgcs54bxwsc2bx6mglm/app.bsky.feed.post/3mgnjzkcnud2uhttps://bsky.app/profile/evansims.com/post/3mgg43okhva27Your authorization system can't prove it worked correctly yesterday. Try it. Pull your logs and database backups. I'll wait.06 Mar 2026 20:01 +0000at://did:plc:dvwv5cgcs54bxwsc2bx6mglm/app.bsky.feed.post/3mgg43okhva27https://bsky.app/profile/evansims.com/post/3mgd6eyfe5327"We deploy in eu-west-1" is not a data residency guarantee. A deployment configuration is a policy. A consensus protocol that physically can't replicate data outside a jurisdiction is a guarantee. One satisfies an auditor's question. The other satisfies the follow-up.05 Mar 2026 16:04 +0000at://did:plc:dvwv5cgcs54bxwsc2bx6mglm/app.bsky.feed.post/3mgd6eyfe5327https://bsky.app/profile/evansims.com/post/3mgb37lzqyi2mYour authorization layer is the only part of your infrastructure you can't verify — and it's making every access decision. You've got observability everywhere. APIs, databases, services — all instrumented. But auth? It's a black box. Outputs "allow" or "deny" and you trust it.04 Mar 2026 20:02 +0000at://did:plc:dvwv5cgcs54bxwsc2bx6mglm/app.bsky.feed.post/3mgb37lzqyi2mhttps://bsky.app/profile/evansims.com/post/3mg3zwzwzeg2fMarathon is the first extraction shooter I've found that doesn't feel like a second job. Spent all weekend playing with my partner and friends. The cyberpunk aesthetic is stunning — combat is tight, and even short sessions feel rewarding. Most fun I've had with the genre!02 Mar 2026 19:56 +0000at://did:plc:dvwv5cgcs54bxwsc2bx6mglm/app.bsky.feed.post/3mg3zwzwzeg2fhttps://bsky.app/profile/evansims.com/post/3mg3mjvoqjb2vZero trust for identity? Check. For devices and networks? Yep. For workloads? Of course. For the authorization layer that actually enforces access decisions? Crickets.02 Mar 2026 15:56 +0000at://did:plc:dvwv5cgcs54bxwsc2bx6mglm/app.bsky.feed.post/3mg3mjvoqjb2vhttps://bsky.app/profile/evansims.com/post/3mcc4j7h6ep2aI'm building a little game engine in Metal/Vulkan from scratch with Claude Code (just for fun) and I decided I wanted to integrate a big throw back to my early gamer days — Starsiege Tribes skiing. I can't tell you how overjoyed I was that Claude understood this concept thoroughly.13 Jan 2026 08:17 +0000at://did:plc:dvwv5cgcs54bxwsc2bx6mglm/app.bsky.feed.post/3mcc4j7h6ep2ahttps://bsky.app/profile/evansims.com/post/3mcbblwj27a24Ever wonder what's actually happening inside your authorization system? Traditional setups operate like black boxes: permissions go in, yes/no comes out, and you just hope nothing's been tampered with. We're changing that.13 Jan 2026 00:15 +0000at://did:plc:dvwv5cgcs54bxwsc2bx6mglm/app.bsky.feed.post/3mcbblwj27a24https://bsky.app/profile/evansims.com/post/3mbndpj6se22jAt the beginning of each workday, each player draws 7: three ‘Just Checking In’s, two ‘No Rush On This’s, one ‘Per My Last Email,’ and a legendary: ‘Let Me Know How I Can Help.’ You may play any number of kindness spells this turn.05 Jan 2026 02:00 +0000at://did:plc:dvwv5cgcs54bxwsc2bx6mglm/app.bsky.feed.post/3mbndpj6se22jhttps://bsky.app/profile/evansims.com/post/3mayoslddgx2vLove building terminal UIs — it scratches an itch that's hard to define. Coming of age in the 90s hacking scene left an impression on me, I think. This is from @InferaDB CLI's `dev status --interactive` command. It's built using our Rust-native TUI framework inspired by Bubble Tea, called Ferment.27 Dec 2025 20:52 +0000at://did:plc:dvwv5cgcs54bxwsc2bx6mglm/app.bsky.feed.post/3mayoslddgx2vhttps://bsky.app/profile/evansims.com/post/3m63fqpzs662zIn Chicago this week visiting with our dear friends 😊20 Nov 2025 18:33 +0000at://did:plc:dvwv5cgcs54bxwsc2bx6mglm/app.bsky.feed.post/3m63fqpzs662zhttps://bsky.app/profile/evansims.com/post/3m5zaxk6hyv2oI have the sudden urge to build a MUD with Rust19 Nov 2025 22:02 +0000at://did:plc:dvwv5cgcs54bxwsc2bx6mglm/app.bsky.feed.post/3m5zaxk6hyv2ohttps://bsky.app/profile/evansims.com/post/3m5ymqkykf22s"Startup" (the series) was a delightful surprise. I recently binge-watched all three seasons. It's a bummer we won't be getting a Season 4!19 Nov 2025 16:00 +0000at://did:plc:dvwv5cgcs54bxwsc2bx6mglm/app.bsky.feed.post/3m5ymqkykf22shttps://bsky.app/profile/evansims.com/post/3m5xrw5gyzm2aFinding something you're so passionate about that you can envision dedicating the next decade to it is rare and exciting. The first for me was my fiancé; the second is @InferaDB.19 Nov 2025 08:00 +0000at://did:plc:dvwv5cgcs54bxwsc2bx6mglm/app.bsky.feed.post/3m5xrw5gyzm2ahttps://bsky.app/profile/evansims.com/post/3m5wvomwc7l2lHot take: Rust is the future of software development, and I'm shaping InferaDB to be a predominantly Rust-based company from the ground up.18 Nov 2025 23:34 +0000at://did:plc:dvwv5cgcs54bxwsc2bx6mglm/app.bsky.feed.post/3m5wvomwc7l2l