§00/Writing

Field notes from
the sovereign stack

Long-form, deeply technical writing for engineers who run what they own — Kubernetes security, Talos Linux, cloud repatriation, self-hosted AI, supply-chain integrity, and the audit-grade rigor that makes self-hosting safe in serious environments.

Supply ChainComplianceDataOperationsSovereign AISovereigntyEdgeDeliveryInfrastructureOptionalitySecurityLocal-FirstNetworkingResilienceObservabilityPlatform EngineeringGovernanceRuntimeStorageScalingFinOpsStreamingBare MetalMulti-TenancyCI/CDIdentityKubernetesProgressive DeliveryCloud ExitGitOps

§01/Latest

Showing 1–9 of 92

Supply Chain

Secure by Design Is Now a Procurement Question

Secure by Design is a voluntary pledge CISA never verifies — yet its goals reach you as buyer questions. What each one demands, and the evidence answering it.

4 Sep 202613 min read

Compliance

The Data Processing Agreement Is an Architecture Decision

A data processing agreement allocates obligations your stack must then meet: AWS and Google resolve the right to object into leaving, not refusing.

3 Sep 202613 min read

Data

OpenSearch vs Elasticsearch: Benchmarks, Drift, Licence

OpenSearch vs Elasticsearch: both ship Lucene 10.5, the vendor benchmarks disagree, and Elastic's AGPL covers the source, not the releases you actually run.

2 Sep 202613 min read

Compliance

PCI DSS Audit Scope: An Evidence Problem, Not a Network One

A PCI DSS compliance audit validates a scope you documented yourself. What the ROC template asks for, who picks SAQ D, and where tokenisation truly helps.

1 Sep 202613 min read

Operations

Air-Gapped Patching with Katello: Mirrors and Evidence

Katello mirrors move packages across the air gap. Proving the patch SLA is the harder half, and Debian and Ubuntu hosts need their own OVAL feeds.

31 Aug 202613 min read

Sovereign AI

On-Premise AI: The Decision Order for the Whole Stack

On premise AI fails on sequencing, not technology. The decision order for the whole stack: workload contract, silicon, serving, partitioning, gateway.

30 Aug 202613 min read

Sovereignty

Third-Party Risk When One Vendor Runs Your Whole Platform

Third party risk management scores control maturity, and the vendor running everything wins on it. DORA template B_07.01 scores substitutability instead.

29 Aug 202613 min read

Compliance

TISAX ISA2027 for Suppliers Who Host Their Own Systems

TISAX and the VDA ISA2027 catalogue define an external IT service as processing outside the audit scope. What that boundary means when you self-host.

28 Aug 202613 min read

Edge

KubeEdge Device Twins and the Industrial Data Plane

How KubeEdge models devices as Kubernetes CRDs, why DMI lets telemetry stay on site, and where the twin's offline guarantees actually stop.

27 Aug 202613 min read

§00 / WRITING

Executive Briefing

Thirty minutes to clarify your infrastructure risk

Walk us through your vendor footprint and regulatory constraints. We will tell you honestly where sovereignty creates leverage — and where it does not. No pitch deck. No obligation.

Book an executive briefing How we engage