Perspectives
Notes from the practice.
Short and specific. What we measure, what we refuse to assume, and the patterns that hold up when an auditor is in the room.
- 2026-09-11Assess the tenancy, not the TerraformInfrastructure-as-code states intent. The findings live in the gap between intent and what is actually running.
- 2026-09-11The before-and-after report is the deliverableWhy every Fortova engagement brackets its work with two runs of the same benchmark, and what that pair of reports is for.
- 2026-09-11One OAuth client per connectionThe integration standard we enforce in every Oracle estate, and the failure that taught it.