Posts tagged: til
Unsigned Terminals: What Auditors Actually Fear (and What PSM Does Instead)
A terminal produces claims, not proof. What cryptographic signing actually guarantees in 60 seconds, and how privileged session management delivers the same trilogy by process instead of math.
Red-Main Normalization: Why Stacked CI Failures Feel Endless
Three stacked pipeline failures, each fix unmasking the next: a missing submodule, a missing binary, and a test guarding a file that was never committed. The pattern has a name, and two locks end it.
One Runtime to Debug: Killing the Last Python Call Site
A repo-wide hunt found exactly one live Python shell-out. Killing it took Java interop, and keeping it dead took a guard with a negative control. One runtime means bugs arrive with names attached.