Identity is more than a login.

People, services, pipelines and agents all need a way to establish who they are. Then comes the separate question: what should they be allowed to do?

Follow an identity through the system

A fictional learning simulation — not connected to real identities, credentials, services or access.

Choose who or what is acting

Web application · Selected Work · Better Auth / Resend / Neon (planned)

1. Identity

An approved recruiter visiting Selected Work

Key idea: Authentication identifies the visitor; authorization is checked for every document.

Test a permission decision

These simplified conditions are not a production authorization engine. Change them to see why sign-in is not enough.

Simulated result

Deny access

Every required condition must pass. A successful login alone never guarantees access.

Educational simulation only. Better Auth, SSO, SCIM and machine identity examples describe concepts, not live portfolio integrations.