Are you sure you know how to write software?
The second control point-of-focus: ensuring code is of sufficient quality. Every change that gets merged should be of acceptable quality.
Are you sure you know how to write software? Read More »
ai governance
Qwen3.7 max – frontier performance & Cost
Qwen3.7 max – compares to Opus 4.7 and GPT 5. frontier models on both performance and cost.
Qwen3.7 max – frontier performance & Cost Read More »
Why does CI/CD stop short of compliance?
If your delivery pipeline produces working software but you still spend weeks assembling audit evidence, the pipeline isn’t finished.
Why does CI/CD stop short of compliance? Read More »
Thirty-five years of building banking software taught me one thing about compliance
Thirty-five years inside this industry have taught me one thing about compliance: it isn’t a paperwork problem, it’s a design problem. Architect the system to produce its own proof, and the audit “problem” stops being one.
Thirty-five years of building banking software taught me one thing about compliance Read More »
Why your audit team and your DevOps team are both right
After thirty-five years inside the audit-versus-engineering meeting, the case for why both sides are right — and why the duplicated approvals look like cover-your-ass to the only person actually carrying accountability.
Why your audit team and your DevOps team are both right Read More »