Posts

All the articles I've posted.

• AI Supply Chain Attacks: New Vectors in Dependencies

  13 Jan, 2026 • Updated 11 Feb, 2026

  Slopsquatting: attackers register packages AI hallucinates. XZ Utils showed the stakes. A framework to assess your AI supply chain exposure.

• Orchestrating AI Agents: A Subagent Architecture

  24 Dec, 2025 • Updated 13 Aug, 2026

  50% cost reduction with subagent architecture for AI coding. Capable models for planning, fast models for building. Real metrics from Goose.

• AI-Augmented CI/CD: Shift Left Security With Bounded Risk

  6 Dec, 2025 • Updated 24 Aug, 2026

  AI code review in CI/CD with contained prompt injection. Defensive patterns: review-context profiles, managed review gates, capability isolation.

• AI-Assisted Development: The Accountability Layer

  7 Nov, 2025 • Updated 8 Sep, 2026

  AI made writing code faster. Without governance controls, it makes reviewing and understanding code slower. The accountability layer is the structural response.

• AI-Governed DNS Migration Without Maintenance Windows

  6 Nov, 2025 • Updated 30 May, 2026

  Programmatic pre-validation eliminates the weekend window from DNS migrations. Full platform migration: 2 hours, business hours, zero downtime.