Writing

Blog

Notes on compliance, cybersecurity, DevOps, and applied AI — the four pillars, in long form.

Shipping agentic AI that actually saves time

Agent demos are easy; agents that survive contact with real operations are not. Notes from putting multimodal RAG and agent workflows into production.

Jun 10, 2026 · 2 min read

COMPLIANCECYBERSEC

Designing an ISO 27001 ISMS that engineers respect

Compliance fails when it reads like paperwork. Here's how I frame an information security management system as a product engineers actually use.

May 18, 2026 · 2 min read