> Markdown version of [/events/world-congress-2026-north-america/sessions/1703-it-passed-auth-then](https://www.wearedevelopers.com/events/world-congress-2026-north-america/sessions/1703-it-passed-auth-then). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# It passed auth, then production caught fire


- **Event:** World Congress 2026 North America

## Description

Most teams still think of authorization as a security concern. In modern systems, it has quietly become a reliability concern as well.

Authorization logic is no longer confined to one codebase. It is spread across application services, API gateways, background workers, data platforms, and now AI driven automation. Each layer makes its own decision, often with incomplete context and slightly different assumptions. This works until scale, automation, and non human identities turn small inconsistencies into systemic failure.

In this talk, we will look at real world failure modes where authorization bugs manifested as cascading outages, stuck workflows, data corruption, or unexplainable behavior under load. We will show how fragmentation hides these problems until decision volume spikes, and why traditional testing and observability rarely catch them early.

The session introduces a practical mental model for treating authorization as part of system reliability. We will cover warning signs that teams can spot before incidents happen, and architectural patterns that reduce blast radius without centralizing every decision or rewriting existing systems.
Attendees will leave with concrete criteria for evaluating their own architectures, and a checklist for making authorization behavior predictable, testable, and explainable at scale.

## Speaker

### [Alex Olivier](https://www.wearedevelopers.com/@alex-olivier)

Co-founder & CPO @ Cerbos | OpenID AuthZEN Co-chair


## Related talks at this congress

- [When Agents Became Users: Rearchitecting Identity and Permissions for AI at Scale](https://www.wearedevelopers.com/events/world-congress-2026-north-america/sessions/1713-when-agents-became) — Yoav Gal, Dor Cohen
- [Reinventing Testing Practices in the AI Era](https://www.wearedevelopers.com/events/world-congress-2026-north-america/sessions/1724-reinventing-testing) — Eric Deandrea
- [Securing AI Agent Infrastructure: Identity, Attestation, and Trust at Scale](https://www.wearedevelopers.com/events/world-congress-2026-north-america/sessions/1432-securing-ai-agent) — Abdel Fane
- [Closing the Visibility Gap: Lessons from Safety Critical Agentic Systems](https://www.wearedevelopers.com/events/world-congress-2026-north-america/sessions/1408-closing-the) — Vivek Pandit

## Watch remotely

Can’t make it to San José? Watch this session live with Pro. You also get:

- All full videos, bookmarks, and playlists
- World Congress livestreams

[See pricing](https://www.wearedevelopers.com/pricing)

## Links

- [Get tickets](https://www.wearedevelopers.com/world-congress-north-america/tickets)