#devsecops

Articles tagged with #devsecops

The EU CRA countdown
CE-marked software is coming
May 20, 202610 min read
The agentic SOC is here
Platform teams: here is what you own
May 11, 202611 min read58
The distributed monolith tax
Shopify, Amazon Prime Video and the 2026 modular-monolith pattern that beats microservices cosplay
May 6, 202611 min read6
Short-lived OIDC for CI: kill every long-lived GitHub Actions token
AWS OIDC, GCP WIF, Azure federated credentials
May 3, 20268 min read21
Governing the Ungovernable: Building an EU AI Act Article 9 Compliance Framework for Agentic AI That Actually Works in Production
Static compliance frameworks were built for fixed pipelines. Agentic AI has runtime-determined risk profiles, non-deterministic tool chains, and emergent blast radii. Here is the six-layer architecture, full implementation code, and CI/CD gate that closes the gap before the August 2026 enforcement deadline.
Feb 28, 202615 min read125
The $4.45M Mistake: How a Missing SBOM Requirement Let the XZ Utils Backdoor Slip Past Millions of Servers
A 3-year patient infiltration. One 500ms anomaly. Zero automated defenses. Here's the full architecture of what happened, what should have stopped it, and how to build a self-healing supply chain security system into your IDP, today.
Feb 22, 202622 min read33