Notes

Technical observations without vendor mythology.

Longer articles, short architectural notes and reminders about controls that look simple until they reach production.

Trust boundaries are more important than network diagrams

How to identify the points where identity, privilege, administration and data ownership actually change.

Origin isolation, request limits, logging and timeout decisions that matter after the certificate is installed.

Why identity-aware access and network controls solve related but fundamentally different problems.