Identity / Artilect ID
LiveOperate sign-in across a family of applications.
A self-hosted OIDC identity provider with passkeys, session controls and an operator CLI, packaged as one Go binary.
Why I built it
Several applications needed a common identity service. I chose to own that service and constrain its implementation to one binary, one database and a small dependency set.
Engineering decisions
Verify signed tokens locally at each application through published keys.
Support passkeys, multi-factor authentication and refresh-token rotation with family revocation.
Provide signing-key rotation, signed audit checkpoints and rehearsed encrypted-backup restoration.
What works today
The service is live for True North, Folio and several client applications. The September 2026 portfolio records eight registered apps and eleven Debian releases between June and August.
Current boundaries
Implemented security controls describe the engineering work. They do not establish a compliance certification or replace an independent assessment.