The Inverted Podcast

The episode contains solid, practitioner-grounded observations about identity's evolution - regulatory shifts toward prescriptive outcomes, the challenge of deploying agents without baseline controls, runtime vs. design-time security paradigms - that a B2B operator would find useful. However, it mixes substantial insights with considerable throat-clearing, tangential banter about weather, and repetitive restatement of ideas without driving them to concrete conclusions or actionable specifics.

“identity was plodding along, evolving. Things like pass keys were coming up. Um, there was a switch from authentication focus to more on smart authorization”

“companies are just trying to get strong authentication under their belt and modernize their identity systems and uh, to modernize their authorization systems are going to take a while”

The discussion covers genuinely useful frames - design-time vs. runtime controls, agents as delegated access problems, regulatory shift from effort-demonstration to outcome-guarantee - but these are not particularly novel to identity professionals. The eIDAS / digital wallet discussion is informative but largely descriptive of existing EU initiatives rather than contrarian or first-principles thinking. The framing of agents as 'assistants on steroids' is intuitive but not counterintuitive.

“Most of the LLMs in usage in Europe are kind of like from a sovereign governance perspective, based out of the United States, maybe in China. But I think the question of who owns the compute”

“the path to go is you give the agent as little information as they need in as clear way. Especially when it's about financial transactions. You limit the time they can make those financial”

The four speakers appear to be identity practitioners and advisors with real client exposure and regulatory visibility (particularly Dario in financial services, Tom in enterprise identity governance). However, the transcript does not clearly state their titles, company affiliations, or specific scale of operations they've managed, making it difficult to assess seniority with certainty. They speak with credibility but lack explicit credentials or evidence of having shipped/scaled major identity systems.

“I spend a good part of my time with technology providers and professional services provider who cater to like financial services for example”

“clients and um, what I expect to be the trend in the next 12 months will be, people will say, yeah, we need to. Yes, you know, our board, our C suite are really kind of like being blasted”

The episode lacks concrete numbers, named companies, or detailed case studies. Signal AI / CrowdStrike is mentioned briefly, but no specifics on implementation timelines, adoption rates, or measurable outcomes. eIDAS rollout is discussed in vague terms (end of year, end of next year) with no hard deadlines cited. No data on regulatory penalties, actual agent failures, or enterprise modernization spend is provided. Mostly abstracted discussion of trends.

“I think it's a company, I'm not sure if you've heard of them. They're called Signal AI. They sold to CrowdStrike”

“like they're supposed to be ready at the end of this year and fully up and running at the end of next year”

The host asks follow-up questions and occasionally pushes for clarification (e.g., asking Dario to explain eIDAS, probing single-point-of-failure risks in central ID systems). However, questions often don't dig deep; many are softball setup lines that let guests riff without being challenged or pressed for evidence. There's little productive disagreement - speakers mostly build on each other's points. Multiple instances of 'you're muted' and tangential weather chat detract from substantive exchange.

“Yeah. Dario, you just said a term called idas or something. Would one of you be able to maybe. Dario, can you explain to the audience what that means”

“So great central government ID system. I can upload my passport and then hook up all my things and then I want to travel or get married or do something and then the system is down like single point of failure”