July 2026

The Status Quo Outlived Its StatusJuly 17, 20266 min readSecurity Practice
Security failures accumulate in the seams between coherent systems. The same ownership gaps explain why institutions preserve a status quo after its assumptions expire.
Why FIPS 140 Means Running Old CodeJuly 13, 20263 min readCompliance & Audits Cryptography & Keys
FIPS 140 validation can improve key isolation while forcing organizations to run opaque, outdated cryptographic software. Public validation data can turn labels into better security questions.
The Certification Ends Where the Code BeginsJuly 10, 20265 min readCompliance & Audits Cryptography & Keys
Certification records explain what evaluators examined, not whether the surrounding firmware behaves as assumed. Assurance must connect the paper trail to evidence from the code that shipped.
Steve Jobs, AI, and the Problem of Analysis Without OwnershipJuly 9, 20265 min readAI Leadership & Product
AI makes analysis abundant, but judgment still comes from owning decisions and living with their consequences. The best systems should connect analysis, action, verification, and learning.