Cryptographic engineering
Plan the migration before changing the algorithm
Inventory dependencies, identify compatibility risks, and sequence a post-quantum transition.
Insights
Engineering perspectives.
Technical depth for decisions about cryptographic migration, AI trust boundaries, and security on demanding platforms.
Start with the decision
Featured reading
AI security
Where does untrusted input become authority?
Map prompt injection to the data and tools an AI workflow can actually reach.
Payment systems
Design for the device you cannot trust
Understand the boundaries between a mobile endpoint, protected keys, and backend controls.
From the notebook
Recent publications
July 14, 2026
AI Resilience vs. Governance: Bridging the Gap
A practical guide to the AI resilience gap: why governed AI systems can still break important business services, and how to map AI dependencies, impact tolerances, substitutability, fallbacks, and provider...
July 12, 2026
AI Compliance and Governance in Canada
A practical guide to Canada's layered AI governance environment, covering privacy law, Quebec obligations, federal public-sector automated decision rules, sector regulators, OSFI E-23, health AI, cybersecurity, standards, readiness, and market...
July 10, 2026
Token Capital and AI Integration Metrics
A practical framework for measuring organizational AI integration through Token Capital, ecosystem maturity, governance controls, frontier-access readiness, task evaluations, telemetry, and business outcomes.
June 24, 2026
OECD AI Principles Governance Guide
A practical analysis of the OECD AI Principles, their values-based principles, policy recommendations, global adoption, accountability mechanisms, critiques, case studies, and implementation steps for trustworthy AI governance.
June 24, 2026
AI Governance and the EU AI Act
A practical analysis of Regulation (EU) 2024/1689, covering AI Act risk tiers, high-risk obligations, value-chain responsibilities, conformity assessment, transparency duties, GDPR overlap, SME impact, enforcement, and compliance planning.
June 24, 2026
AI Governance and the GDPR
A practical analysis of how GDPR obligations apply to AI systems, including lawful basis, Article 22 automated decision-making, DPIAs, AI Act overlap, enforcement, mitigation, sector risks, and governance recommendations.
June 18, 2026
AI Computational Governance
A practical guide to computational governance for AI systems, covering policy-as-code, runtime enforcement, telemetry, assurance, incident response, lifecycle alignment, standards mapping, and implementation metrics.
June 18, 2026
ISO/IEC 42001 AI Management System
A practical guide to ISO/IEC 42001:2023, the international management-system standard for responsible AI governance, risk management, lifecycle control, audit, and continual improvement.
Start with the engineering problem
What needs to be secure?
Share your system, the decision ahead, and the constraints. We’ll work out a useful next step.