Army RMF 2.0: How the Updated Framework Works
How Army RMF 2.0 (Project Sentinel) restructured control selection, inheritance, and monitoring — and how it maps onto the DoD's new five-phase Cybersecurity Risk Management Construct.
Technical Journal
Notes on secure systems, software delivery, and applied AI.
Field-informed writing on cybersecurity, DevSecOps, architecture, automation, and the engineering practices that make complex systems more trustworthy.
Start Here
Choose a path through the journal.
Recently Updated
Evergreen notes
Featured Essay
July 5, 2026
cybersecurity
Latest Notes
5 total
architecture
CDAO, Swarms, and the Kill Chain as Microservices
Why the kill chain is decomposing into services on a data fabric — what Replicator's dissolution into DAWG reveals, how Open DAGIR works as an...
cybersecurity
SBOM in the Defense Industrial Base
A practical breakdown of SBOM requirements, format standards, toolchain options, and where DIB contractors consistently fall short when the contracting officer asks for one.
cybersecurity
CMMC 2.0 in Practice
A practical breakdown of CMMC 2.0 levels, NIST SP 800-171 control domains, and what contractors must demonstrate to pass a C3PAO assessment.
ai
Runtime Governance for Mission AI
A runtime governance model for autonomous systems operating beyond traditional approval gates.