Welcome to my website, where I write about cybersecurity, compliance automation, policy-as-code, and philosophy. I share practical insights and personal observations that I've picked up over the years, based on my unique perspective that draws from military, industry, government, and personal experience.
FedRAMP’s 2026 rules leave each vulnerability decision to the provider. Is it reachable? Is it likely to be exploited? How bad would it be, and how fast must it be fixed? I propose a method, built on data mesh, that makes those answers trustworthy and comparable across providers.
FedRAMP 20x is handing a lot of compliance work to machines. So what’s left for the people? Using John Boyd’s OODA loop, I argue that observing and acting are becoming machine work, while judgment, built from experience, is where we humans sit. Good governance applies that wisdom at scale.
There is no view from nowhere. We sit inside the feedback loops we try to observe, which makes each of us a threshold rather than an observer: the place where a system tips one way or the other. This essay argues that information-technology governance is finally flexible enough to extend that steering past the individual to organizations and communities.
2023
Join me on a journey across America, from eastern cities to western deserts, as I search for what's really valuable.
2021
An open-minded exploration of reality using Occam's razor and the scientific method.
A practice mirror for Chen Taijiquan — record a silk-reeling movement and pose estimation compares your form to a recognized master, translating per-joint deviations into feedback grounded in Chen terminology. Private beta; login required.
An app that curates information from a wide range of reputable sources and creates custom daily reporting for me on events and trends that I care about.