Shift-Left DevSecOps for IaC and CI/CD Pipelines
Shift-left should not mean running more scanners before merge. Its purpose is to move a useful security decision close to the change: a safe default,...
Insights
Analysis and practical guides on cloud, software delivery, data and engineering teams.
Shift-left should not mean running more scanners before merge. Its purpose is to move a useful security decision close to the change: a safe default,...
Owning accelerators, a Kubernetes cluster and model access does not establish production readiness. Infrastructure is ready when the organisation can...
Scale an AI coding assistant only after it improves the software delivery system, not merely the rate at which code appears. Accepted suggestions, generated...
The public title remains, but the operational decision has changed: Kubernetes 1.33 is no longer a valid upgrade target. It reached end of life on 28 June...
MCP and A2A solve different integration problems. Model Context Protocol describes how an AI application uses tools, resources and reusable prompts....
The price of a million tokens does not reveal whether an AI product has sound economics. The useful decision unit is the cost of a verified outcome: a...
An agent should not inherit a user's broad authority or operate behind a shared, static API key. Every runtime that performs work needs a short-lived...
Planning for 2026 has become execution, so this article now serves as a decision review and a framework for the next budget cycle. Its central correction...