The story
Conditional access is a security policy written as an if-statement: if the sign-in comes from a trusted location, allow it, otherwise block it or challenge harder. I write these policies at work. Done properly, they look at real risk signals like the device, the time and the behaviour, and ask one question: is this really you?
Done badly, they just ask where you came from. Growing up in London, I realised life already runs on bad policy. The postcode on the form doubles your insurance quote. Catchment decides the school, and where you live decides the queue. "Where you from?" isn't small talk. It's a policy check. Same rule, two systems, both built on the map.
People misread zero trust as "trust nobody from round here." It actually means trust nobody by default, which is everybody, with the same checks and the same chance. A strong verification from the block should count the same as one from Mayfair. This is a bassline track because it belongs in a sweaty room with a crowd shouting the hook back. Evaluate the person, not the pin they dropped.
Key lines
- “Same man, same device, wrong postcode โ why?”
- “'Where you from?' โ that's a policy, not a chat”
- “Evaluate the person, not the pin they drew!”
- “Zero trust was never meant to mean 'trust nobody from here'. It means trust nobody by default.”
Written by Nicholas Martin. Produced with Suno v6.