Principal component
// the part that does the work
I wrote software for a couple of decades before I moved into security, and that background is the whole point: I don’t think of security as a stack of compliance checkboxes. It’s about protecting the actual people who depend on the software you ship.
These days I build AI agents that close the loop — not chatbots that make polite suggestions and leave the work to you. And I’ll argue this to anyone: the SDLC matters more in the agent era, not less. Vibe coding doesn’t fail because the model is dumb. It fails because it skips the plan.
Bill of materials
// posts, by reference designator — full BOM
| REF | DATE | DESCRIPTION |
|---|---|---|
| W1 | 2026-07-27 | Learning to Think in Terms of Ideal State Articulation |
| W2 | 2026-07-23 | Why I'm About to Start Talking to a Necklace |
| W3 | 2026-07-13 | Insecure Defaults, Part 2: Excessive Agency |
| W4 | 2026-07-04 | What I'm Building: The Safer Church |
| W5 | 2026-06-30 | Stop Letting Your AI Read Files: The Token Economics of Code Intelligence |
| W6 | 2026-05-05 | Secure Coding Before the First Keystroke |
| W7 | 2026-02-10 | Starting Is Success: The App I Built Because My Brain Won't Start Things |
| W8 | 2025-10-26 | The Ham and the Hacker Are the Same Person |
Signal output
// broadcast mode
I talk about DevSecOps, AppSec at scale, and what security actually looks like in the AI era — the practical version, not the hype deck.
[ TALK LIST — TP1: PENDING POPULATE — archive ]
Discrete components
// the stuff that makes it his board
Ham radio
Operating on the air and building rigs on the workbench — solder smoke included.
Smoking brisket
Low, slow, and endlessly tweaked. Every cook is another experiment in the log.
FPV quads
3D-printed frames, hand-built, then flown until something needs reprinting.
Interfaces
// pinout