Welcome to my website, where I write about cybersecurity, compliance automation, policy-as-code, and philosophy. I share practical insights and personal observations that I've picked up over the years, based on my unique perspective that draws from military, industry, government, and personal experience.
There is no view from nowhere. We sit inside the feedback loops we try to observe, which makes each of us a threshold rather than an observer: the place where a system tips one way or the other. This essay argues that information-technology governance is finally flexible enough to extend that steering past the individual to organizations and communities.
I spent a few days and a few dollars making my Tai Chi web app audit-ready for a FedRAMP Class C assessment. It isn’t FedRAMP Certified and never will be, but every document an assessor would ask for is live right now, and anyone can check it in about five minutes.
20x bets that automated KSI validation makes inventory questions answerable without a separate inventory deliverable. That bet only pays off if KSIs themselves carry standardized component references.
2023
Join me on a journey across America, from eastern cities to western deserts, as I search for what's really valuable.
2021
An open-minded exploration of reality using Occam's razor and the scientific method.
A practice mirror for Chen Taijiquan — record a silk-reeling movement and pose estimation compares your form to a recognized master, translating per-joint deviations into feedback grounded in Chen terminology. Private beta; login required.
An app that curates information from a wide range of reputable sources and creates custom daily reporting for me on events and trends that I care about.