IDENTITY · ACCESS · BUILDING

Who are you, and what are you allowed to touch?

That one question is my whole job. On login.gov it means proving someone is real before they reach a benefit, on a platform serving 100 million accounts. On a mobile driver's license, it's the same proof, cryptographic, in your pocket. Lately I think about it for AI, because the hardest version isn't about people anymore. I write here while I work through it.

Book a 30-minute Identity & Access Risk ReviewBrowse field notes →
ATTESTATIONVALID
Malik Warren
Malik Warren
Identity & access engineer
Government IdP
login.gov · NIST 800-63 IAL2
Mobile driver's license
OpenID4VP · ISO mdoc · NIST showcase
Access control
Cleared defense systems · identity & access
sig: a3f1·8e07·9c2dself-issued
Field notes on digital identity.
mDL, login.gov, and access control. 1-2 emails a month. Real engineering detail, no fluff.

What I write about

FOUR TOPICS

Field notes

VERIFIABLE IDENTITYJUL 2026 · 4 MIN READ

You Shouldn't Have to Show Your Address to Buy a Beer

Why selective disclosure is the whole point of the mobile driver's license, explained at a bar.

REFLECTIONSFEB 2026 · 4 MIN READ

I Used to Think I Was 'Too Much.' Then I Realized I Was Just in the Wrong Room.

On heartbreak, nervous system upgrades, and learning to trust your own depth.

VERIFIABLE IDENTITYJAN 2026 · 3 MIN READ

I built my first mDL demo, and the seamlessness is what hooked me

I simulated buying alcohol online with a mobile driver's license and shared exactly one fact: am I over 21. That was the moment I got hooked, and the moment I started asking why every state builds this differently.

VERIFIABLE IDENTITYJAN 2026 · 3 MIN READ

What a mobile driver's license actually is, and why my state got me paying attention

A mobile driver's license is not a photo of your license. It is a signed credential that lets you prove one thing without revealing everything, and it is quietly becoming infrastructure.

BUILDINGOCT 2025 · 5 MIN READ

Voice Agent Architecture: A Deep Dive into Real-Time Processing

Exploring the complete architecture of an on-device voice agent with cloud processing, Go middleware, and AI categorization.

BUILDINGOCT 2025 · 2 MIN READ

Building an AI Companion for Vision Pro

Starting a production journey to create an intelligent 3D avatar assistant for spatial computing.

ABOUT
Malik Warren

I work on identity verification and access control, and I write about the parts most writeups leave out.

Day to day, that means identity-proofing and access flows on login.gov, a NIST 800-63 IAL2 identity provider, where my work sits on the identity-verification layer. Alongside that I drove the evaluation of mobile driver's license verifiers (ISO 18013-5) for a NIST use case, and I do cleared identity and access work for defense systems.

I write here to think in public. When a claim has a source, you will find it linked. More about me and how I work →

GitHub ↗LinkedIn ↗X ↗
WORK WITH ME

A 30-day High-Stakes Identity & Access Blueprint

I occasionally take on a small number of teams. In 30 days, we turn a fuzzy identity-and-access surface into a plan your engineers can build.

Book a Risk ReviewScope & pricing discussed on the call

I also take select advisory and speaking work, and I'm open to the occasional right-fit role. See what I'm open to now →

IN 30 DAYS, WE
01Map your current identity-proofing and access-control flows
02Benchmark them against NIST 800-63 and mDL / ISO 18013-5 patterns
03Make 3-5 concrete design decisions, together
04Hand you a 90-day implementation plan for your team