Technical Leadership 20
- Leading Security Architecture Through Verifiable Invariants
- From Incident Timeline to Security Regression Test
- Security Exceptions as Expiring Engineering State
- Security Canaries Must Measure Control Correctness
- Private API Responses and Shared Cache Leaks
- Password-Hash Migrations Under Real Load
- Point-in-Time Recovery as a Security Exercise
- Session Revocation Is a Distributed Containment System
- Designing Kill Switches for Security-Sensitive Features
- Rate Limits That Protect Expensive Work, Not Just Request Counts
- JWT Signing-Key Rotation Without Trust Gaps
- Kubernetes Network Policy: Prove Reachability Before Declaring Isolation
- CI Trust Boundaries: Keep Untrusted Changes Away from Release Authority
- Artifact Provenance Must Survive the Promotion Boundary
- Security Audit Events Are Versioned Product Contracts
- SSRF Defense Belongs at the Connection Boundary
- Closing Authorization Races Without Locking the Whole Application
- Idempotency Keys Are Security Boundaries, Too
- Authorization Caches Need a Revocation Budget
- Tenant Isolation in PostgreSQL: The Connection Pool Is Part of the Threat Model