The Gordian Developer Meeting on October 7, 2026 focused on two topics:
- Cloudflare Passkeys. Improving auth diversity with Passkey-only identity
- Open Integrity & The AI. Identity in GitHub repos & how to credit & use AI.
|
Full Meeting:
[not available] |
Slides:
|
Also see the transcript for the full content of the meeting.
Key Quotes
“There’s a lot of tooling that gets locked into a platform such as
Google or Apple. And yet we want to be able to bootstrap a variety of
other kinds of security. So passkeys can work outside of the Apple and
Google ecosystem.”
—Christopher Allen, on the Purpose of the Passkeys Project
“The core functionality is that the passkey verifies identity. It isn’t
the identity.”
—Christopher Allen, on the Separation of Powers
“We used not really the passkey, but the hardware-backed secret, to be
able to create a stable identity for the device.”
—A Similar Technique in Use
“I think the clear truth is we must use AI to protect against AI.”
—Christopher Allen, on the AI Ouroboros
“How do we disclose and sign things so that we can have some integrity with our repositories? How do we credit AI work?”
—Christopher Allen, on Repo Questions in the Age of AI
“You asked how AI reviewers should be identified. How would that actually be sourced and anchored?” —Another question on AI Provenance
“My gut is that it’s going to be an ongoing battle.” —Christopher Allen, on AI Text Identification