Writing
Notes from the build.
AI security, agents, platform engineering, and federal AI — written from systems actually shipped.
-
What's actually inside your AI? A plain-English guide to the AIBOM
AI bills-of-materials are moving from nice-to-have to non-negotiable. What an AIBOM is, why August 2026 makes it urgent, and how to generate your first one with OWASP-aligned tooling.
-
Defending MCP agents from prompt injection
A threat model for tool-using agents over the Model Context Protocol, and the layered defenses that actually hold up under adversarial testing.
-
cATO on Platform One: compressing ATO from years to weeks
How continuous Authority to Operate reframes compliance as an engineering problem — and the platform patterns that made a 4-week ATO cycle real.
-
A graph-enhanced memory system for AI assistants
Entities, relationships, and time: designing assistant memory that survives long-running operations, handles contradictions, and recalls with intent.