Welcome to my website, where I write about cybersecurity, compliance automation, policy-as-code, and philosophy. I share practical insights and personal observations that I've picked up over the years, based on my unique perspective that draws from military, industry, government, and personal experience.
FedRAMP 20x is handing a lot of compliance work to machines. So what’s left for the people? Using John Boyd’s OODA loop, I argue that observing and acting are becoming machine work, while judgment, built from experience, is where we humans sit. Good governance applies that wisdom at scale.
There is no view from nowhere. We sit inside the feedback loops we try to observe, which makes each of us a threshold rather than an observer: the place where a system tips one way or the other. This essay argues that information-technology governance is finally flexible enough to extend that steering past the individual to organizations and communities.
I spent a few days and a few dollars making this whole site, the website and my Tai Chi web app, audit-ready for a FedRAMP Class C assessment. It isn’t FedRAMP Certified and never will be, but every document an assessor would ask for is live right now, and anyone can check it in about five minutes.
2023
Join me on a journey across America, from eastern cities to western deserts, as I search for what's really valuable.
2021
An open-minded exploration of reality using Occam's razor and the scientific method.
A practice mirror for Chen Taijiquan — record a silk-reeling movement and pose estimation compares your form to a recognized master, translating per-joint deviations into feedback grounded in Chen terminology. Private beta; login required.
An app that curates information from a wide range of reputable sources and creates custom daily reporting for me on events and trends that I care about.