~/ARTICLESls -la ./ideas
Writing & ideas.
Notes, experiences and reflections on the technology we build — and the security that makes it possible.
Security by Design Is Not a Final Gate
Security starts with the decisions we make about people, data and trust — long before the last release checklist.
Trust Boundaries: Where the Real Questions Start
A practical way to read an architecture diagram and find the decisions that matter most for security.
Secure Defaults: The Safest Path Should Be the Easiest
Why safe baselines, sensible guardrails and clear exceptions do more for security than another checklist.
OWASP ASVS 5.0 — What Really Changed, and What Comes Next
A closer look at the 30 May 2025 release: its new architecture, real security benefits, migration trade-offs and the direction application assurance could take next.