SBOM in the Defense Industrial Base
A practical breakdown of SBOM requirements, format standards, toolchain options, and where DIB contractors consistently fall short when the contracting officer asks for one.
Technical Journal
Notes on secure systems, software delivery, and applied AI.
Field-informed writing on cybersecurity, DevSecOps, architecture, automation, and the engineering practices that make complex systems more trustworthy.
Start Here
Choose a path through the journal.
Recently Updated
Evergreen notes
Featured Essay
June 20, 2026
cybersecurity
Latest Notes
5 total
cybersecurity
CMMC 2.0 in Practice
A practical breakdown of CMMC 2.0 levels, NIST SP 800-171 control domains, and what contractors must demonstrate to pass a C3PAO assessment.
ai
Runtime Governance for Mission AI
A runtime governance model for autonomous systems operating beyond traditional approval gates.
cybersecurity
The DoD Zero Trust Strategy: Where It Stands
A breakdown of the DoD Zero Trust Strategy's seven pillars, FY2027 targets, and the implementation gaps that still threaten the timeline.
cybersecurity
Zero Trust Meets the AI Stack
Why your ZT architecture must now account for AI systems, model workflows, and the 2026 National Cyber Strategy