Writing
Field notes, not vendor pitches.
Essays on enterprise AI security — gateways, guardrails, and governance, as they actually play out in practice.
Articles
I couldn't list my own AI tools
Every AI tool takes two minutes to add and nobody goes back to look at it. Notes from building a local scanner for it, and what went wrong along the way.
Giving a finding a name both systems agree on
Two systems, no shared key, and a job that has to know whether this finding is that ticket — plus the rewrite that took it from fifteen minutes to thirty seconds.
A quiet control and a broken one look the same
What I found reading back through security automation I'd written and inherited — and why "it hasn't alerted" is the least trustworthy sentence in security engineering.
Lights out: notes from inside enterprise AI security
Why I'm writing this, what to expect — and where the title comes from.