Hi, I'm

Alexandre.

I like taking identity apart to see how it works.

Notes about identity and access: how people and machines prove who they are, what they’re allowed to do, and how to take it back. Lately, a lot of AI agents. Hands-on, and written in plain words.

Alexandre Carrasco profile image

About Me

I work in identity and access, the quiet part of IT that decides who you are and what you’re allowed to do. Lately one question keeps pulling me in: what changes when the one logging in isn’t a person, but an AI agent?

So I started experimenting to see how it really works. This blog is where I write down what I find: the experiments, the surprises, and the things that didn’t work the first time (there are plenty).

No hype, no sales pitch. Just someone learning in public and sharing notes. If something here helps you, or if you think I got it wrong, I’d love to hear about it.

Opinions are my own.

Things I like to poke at:
  • Logins, tokens and sessions
  • Who can do what, and why
  • Taking access back, fast
  • Machines and AI agents
  • Identity standards, explained
  • Hands-on experiments