// blog

Insights on AI-powered code maintenance, platform engineering, and developer productivity.

Generate FedRAMP compliance documentation across every service

How to Generate FedRAMP Compliance Documentation Across Every Service

FedRAMP authorization spends most of its time on documentation, not controls. Here's the exact method for generating accurate, code-grounded SECURITY.md files — and how to run it across every repo at once.

mandy | Jun 17, 2026 | // 10 min read
Build vs. Buy for Platform Teams — The Hidden Cost of Internal Tools

Build vs. Buy for Platform Teams: The Hidden Cost of Internal Tools

Building internal platform tools usually costs 3-4x more than buying. The true cost is years of maintenance. A framework for deciding build vs buy.

matthew-holmes | Jun 16, 2026 | // 9 min read
Enforce non-root Docker users across every repo in your org

How to Enforce Non-Root Docker Users Across Every Repo in Your Org

A security review flags forty Dockerfiles running as root. The fix is four lines in the right order. Here's the exact method — and how to run it across your entire fleet.

mandy | Jun 10, 2026 | // 8 min read
Mythos on a Leash — Inside Anthropic's Decision to Hand the Public Its Most Dangerous Model

Mythos on a Leash: Inside Anthropic's Decision to Hand the Public Its Most Dangerous Model

An investigation into Claude Fable 5, the safeguards that make it shippable, and the questions those safeguards leave open.

john-laban | Jun 9, 2026 | // 10 min read
Migrate Python 2 to Python 3 across every repo in your org

How to Migrate Python 2 to Python 3 Across Every Repo in Your Org

The mechanical fixes for a Python 2 to 3 migration are straightforward. The encoding audit is where migrations actually break — and where most teams stall when they're doing it across dozens of repos.

mandy | Jun 3, 2026 | // 11 min read
The Frontier Goes Quiet — How Three AI Labs Are Locking Down Their Most Dangerous Models

The Frontier Goes Quiet: How Three AI Labs Are Locking Down Their Most Dangerous Models

Anthropic walled off its most capable model. OpenAI tiered its access. Google built a distributed defensive toolkit. Here is what each decision actually means for defenders.

john-laban | Jun 1, 2026 | // 12 min read