The synthesis. Four posts asked four sharp questions about your pipeline. They were never four separate controls — they were four links in one chain. Here is the chain, and a real system that wired it together end to end.
The chain of custody of code Read More »
The change in production should be the change that was built, reviewed, and approved — and nothing else. That is the control point-of-focus.
Auditors don’t have an opinion on your CI pipeline Read More »
Every change should do what it was meant to do — and the system as a whole should continue to do what it has always been meant to do. That is the control point-of-focus.
What is your software doing? Read More »
The second control point-of-focus: ensuring code is of sufficient quality. Every change that gets merged should be of acceptable quality.
Are you sure you know how to write software? Read More »
Qwen3.7 max – compares to Opus 4.7 and GPT 5. frontier models on both performance and cost.
Qwen3.7 max – frontier performance & Cost Read More »
Every change that hits production should be done for a valid business reason. That is the control point-of-focus.
On the surface it sounds uncontroversial. Of course every change has a reason — the team is professional, the product owner is engaged, the work is tracked. The delivery team would tell you they have this covered.
If your delivery pipeline produces working software but you still spend weeks assembling audit evidence, the pipeline isn’t finished.
Why does CI/CD stop short of compliance? Read More »
Thirty-five years inside this industry have taught me one thing about compliance: it isn’t a paperwork problem, it’s a design problem. Architect the system to produce its own proof, and the audit “problem” stops being one.
Thirty-five years of building banking software taught me one thing about compliance Read More »
After thirty-five years inside the audit-versus-engineering meeting, the case for why both sides are right — and why the duplicated approvals look like cover-your-ass to the only person actually carrying accountability.
Why your audit team and your DevOps team are both right Read More »
Peter Steinberger’s move to OpenAI is a massive signal that the AI industry is shifting from making models smarter to making them actually useful. His viral project, OpenClaw, showed us the future of “agents” that can handle your digital chores, and now he’s leading the charge to bring that to everyone. Are we seeing an intelligence plateau, or just a much-needed pit stop to build the infrastructure that makes AI work for us?
The Claw is the Law: Why Peter Steinberger Joining OpenAI Changes Everything Read More »
