A few days ago, I published High Confidence Is Not a Security Control, having spent some time looking at JEV, a specialised decision model, and the security implications of allowing probabilistic AI judgments to drive consequential actions. The concern was straightforward: a model receives evidence, …

AI security tooling keeps getting faster. Faster triage, faster classification, faster threat intelligence analysis, faster decisions. And, increasingly, faster automated action. That’s exciting, but it’s also where things start getting dangerous. I’ve been looking at JEV recently, …

This is a personal blog. All opinions are my own - not my employer’s. There’s apparently a new category of security incident called AI escape. Except there isn’t. That phrase might be useful shorthand for headlines, and some of the incidents behind it are genuinely serious, but I think …

This is a personal blog. All opinions are my own - not my employer’s. At some point over the last few months, I accidentally built a control plane for coding agents. This was not the plan. The plan, to the extent that there was one, was much smaller and much more normal. I wanted coding agents to …

The next generation of supply chain attacks aren’t targeting packages. They’re targeting repositories. The June 2026 Azure Functions incident may be a glimpse into what that future looks like.

FinOps for Delegated Cognition: GitHub Boiled the Frog Backwards Yesterday started with me staring at a tiny dashboard called CopeLimit. This is not, admittedly, how most normal people choose to spend a Monday morning. Most people, when confronted with a major billing transition from one of the …