Technical Journal
Field-informed writing on cybersecurity, DevSecOps, architecture, automation, and the engineering practices that make complex systems more trustworthy.
Start Here
Why joint and coalition operations fail at the identity boundary — how federated ICAM, dynamic Attribute-Based Access Control (ABAC), and commercial zero trust proxy patterns replace static hardware air-gaps with...
How defense CI/CD pipelines handle secrets without embedding credentials in code — covering dynamic brokers, secrets-as-code, operator patterns, and wiring rotation into continuous authorization evidence....
A curated index of the policy documents, NIST publications, Platform One services, pipeline tools, and compliance resources that defense software teams actually use.
A technical breakdown of Continuous ATO — what it actually requires, how OSCAL enables machine-readable evidence, and where most DoD programs fail to sustain it....
How AI models actually get authorized in the DoD — the Assess Only construct, the coming NIST 800-53 AI overlays, and the re-authorization trigger problem...
