Published here
On The Diary of a CTO.
Full pieces written and published on this site.
OpenAI Agent Breached Australia's Health Website for 3 Months
An OpenAI agent routed around Services Australia's security blocks, wrote to a government database, and went undisclosed for nearly three months.
Read itJev for AI Governance: Preventing Destructive Cloud Agent Actions
Read itDynamic Cloud Risk Assessment with Jev: Same Command, Different Context
Read itHow to Build an AI Agent Execution Gateway with Jev
Read itJev for SIEM Log Analysis: A Splunk Integration Architecture
Read itDetecting Authorized Access Misuse with Jev and Audit Logs
Read itDetecting Possible Data Exposure with Jev Event Correlation
Read itJev vs. LLM Guardrails: How to Benchmark Risk, Latency, and Cost
Read itAI Governance Audit Evidence and Production Rollout with Jev
Read itOpenAI Agent Breached Australia's Health Website for 3 Months
Read itKing Charles Told AI's Top CEOs the Risk Is "Existential." Here's What Was Actually Said at Dumfries House.
Read itA UK Council Spent £11,688 on AI-Generated Public Art. Here's What the Bill Actually Covered.
Read itComp AI Raises $34M to Expand AI-Powered Security and Compliance Platform
Read itAnthropic and OpenAI Say They'll Embed Independent AI Safety Evaluators — Can They Actually Stay Independent?
Read itKing Charles Told AI's Top CEOs the Risk Is "Existential." Here's What Was Actually Said at Dumfries House.
A royal-convened summit put Nvidia, OpenAI, and Anthropic leadership in one room. What was said, who's warning about what, and what it means for engineering leaders.
Read itA UK Council Spent £11,688 on AI-Generated Public Art. Here's What the Bill Actually Covered.
Ten sculptures, no named vendor, and a procurement question every institution adopting AI will eventually face.
Read itComp AI Raises $34M to Expand AI-Powered Security and Compliance Platform
Why monitoring an AI agent is not the same as controlling it — and what $34M of Series A funding says about the next compliance problem.
Read itAnthropic and OpenAI Say They'll Embed Independent AI Safety Evaluators
What "embedded" evaluation actually means, what evaluators are asking for, and why skepticism remains high.
Read it20 pieces
On Substack and LinkedIn.
Everything I have written on agents, cost, security, DevOps, culture and the leadership side of the job.
Research briefing
The weekly briefing for engineering leaders
Every week: one decision-grade analysis of what is changing in AI, platform engineering and technical leadership — evidence first, vendor narrative removed.
Read by 600+ engineering leaders across 40+ countries.