Journal
How we think about technology, operations, compliance, and the space between them.
Barkme Is Live
On September 4, 2026 we put Barkme live. It watches sites, web apps and APIs from the outside, checks SSL, domain expiry and domain reputation daily, and barks in the channel your team already uses. Here is why we built it and how it works.
Why AI Trustworthiness is defined before development begins
A practical systems approach to trustworthiness analysis, AI Assurance and Human-Centred Design for AI-based systems in high-risk environments.
Review of Methodologies for AI Risk Management: EASA, NIST AI RMF and HUDERIA
Traditional risk methods fall short for probabilistic AI. Here is how NIST AI RMF, EASA DS.AI, and HUDERIA complement each other, and why a layered approach beats picking a single...
The Layer We've Been Missing
Every system has UI, application logic, and backstage CLI. MCP is a new layer: plain language over the capabilities you already built, without replacing your stack.
Why RAG Is Not Only Retrieval-Augmentation-Generation
The RAG acronym hides complexity. Here is what a production pipeline actually needs, beyond retrieval, augmentation, generate.
The cybersecurity problem is organisational
Cybersecurity is organisational. In aviation, that is a safety issue, and Part-IS embeds information security in the safety management system.