Engineering essays from the bench.
War stories, architecture decisions, and the occasional tirade. Written by the engineers who shipped it.
EU AI Act, 2 August 2026: What Changes for Teams Shipping AI Features
Article 50 chatbot disclosure and AI content marking apply 2 August 2026; the Digital Omnibus moves high-risk rules to 2027 and 2028. Engineering checklist.
Post-Quantum Cryptography Migration: A Practical Guide
Migrate to post-quantum cryptography: FIPS 203, 204 and 205, crypto inventory, Mosca's risk model, hybrid ML-KEM TLS with OpenSSL 3.5, and the deadlines.
SOC 2 for Startups: A Practical Guide to Your First Audit
What SOC 2 requires, Type 1 vs Type 2, which Trust Services Criteria to scope, the controls auditors test, and how a startup produces the evidence.
Zero Trust Architecture: A Practical Implementation Guide
Implement zero trust architecture step by step: NIST SP 800-207 components, identity and device signals, policy as code, service identity and segmentation.
HIPAA Compliance for Tech Companies: What You Need to Know
HIPAA compliance for technology companies: PHI requirements, technical safeguards, business associate agreements, and common pitfalls.
ISO 27001 Implementation: A Practical Guide for Tech Teams
How to implement ISO 27001:2022 in a software company: scope, risk assessment, the 93 Annex A controls, evidence from your stack, and the two-stage audit.
