WRITEUPS

Technical writeups, not testimonials.

Real techniques, real architecture decisions, reframed as public writeups — proof of depth while client case studies come in.

OFFENSIVE SECURITY7 min read

Mapping a cloud lateral-movement path to MITRE ATT&CK T1078.004

A walkthrough of how a single over-permissioned IAM role becomes a full lateral-movement chain across a multi-account AWS environment — and the control that stops it at step one.

T1078.004 · Valid Accounts: Cloud Accounts

Read writeup →

AGENTIC AI8 min read

Designing memory and control boundaries for a multi-agent system

An architecture writeup on scoping tool access, memory persistence, and context isolation for an internal multi-agent workflow — and where prompt injection actually breaks things.

Agent orchestration · MCP · threat modeling

Read writeup →

DEVSECOPS6 min read

One capability, one tool, one gate: building an evidence trail into CI

How a single enforcement pattern across SAST, SCA, and policy-as-code turns a compliance checklist into something an auditor can actually verify.

OPA/Rego · SOC 2 readiness

Read writeup →