Articles
Giving a finding a name both systems agree on
Two systems, no shared key, and a job that has to know whether this finding is that ticket — plus the rewrite that took it from fifteen minutes to thirty seconds.
A quiet control and a broken one look the same
What I found reading back through security automation I'd written and inherited — and why "it hasn't alerted" is the least trustworthy sentence in security engineering.
Lights out: notes from inside enterprise AI security
Why I'm writing this, what to expect — and where the title comes from.