{"schemaVersion":"1.0","url":"https://www.timmcallister.io/discovery.json","title":"Tim McAllister — public research catalog","description":"Public metadata for writing and field guides on the operating side of digital trust.","language":"en","author":{"id":"https://www.timmcallister.io/#person","name":"Tim McAllister","url":"https://www.timmcallister.io/about","role":"Regional Field CTO at DigiCert","disclosure":"Personal views. This site does not speak for DigiCert or for the authorities and vendors it references."},"scope":{"included":"Public article descriptions, guide summaries and section links, topic metadata, and public feeds and data resources.","excluded":"Drafts, private source documents, subscriber-only reports, and protected report versions.","access":"This catalog describes public resources. It does not change robots.txt, grant a reuse license, or provide access to gated material.","evidence":"Guide references retain their source notes. Article publicationHistory identifies original publication and crosspost locations, not the evidence supporting article claims."},"topics":[{"id":"device-machine-identity","title":"Device & machine identity","url":"https://www.timmcallister.io/subjects/device-machine-identity","description":"Identify, update, isolate, and recover the systems you operate.","question":"Can you isolate one compromised system without breaking everything that depends on it?","researchTerms":["Device trust","Device and machine identity","Device attestation","Matter device attestation","IoT and OT security"]},{"id":"software-assurance","title":"Software assurance","url":"https://www.timmcallister.io/subjects/software-assurance","description":"Connect product evidence with what buyers and regulators need.","question":"Can you connect a shipped product to its components, release approval, and next security update?","researchTerms":["Software supply-chain security","Build provenance","Code signing","Product security evidence"]},{"id":"cryptographic-change","title":"Cryptographic change","url":"https://www.timmcallister.io/subjects/cryptographic-change","description":"Find the dependencies before certificates and algorithms change.","question":"Which dependency will stop your next certificate or algorithm change from reaching production?","researchTerms":["Public key infrastructure (PKI)","Certificate lifecycle","Cryptographic agility","Post-quantum cryptography (PQC)"]},{"id":"ai-trust-in-practice","title":"AI trust in practice","url":"https://www.timmcallister.io/subjects/ai-trust-in-practice","description":"Know what an agent can do, what constrains it, and what can be proved.","question":"Can you explain an agent’s authority, stop its actions, and reconstruct what happened?","researchTerms":["AI-agent identity","Delegated authorization","Runtime policy","Content provenance"]}],"guides":[{"id":"guide:device-identity-lifecycle","kind":"Guide","title":"Device identity from manufacture to retirement","url":"https://www.timmcallister.io/guides/device-identity-lifecycle","description":"A practical architecture for provisioning, attestation, signed updates, recovery, and evidence across the life of a connected product.","summary":["A device identity needs an operating lifecycle: issue it, use it, recover it, and retire it without losing the evidence.","Hardware protection, attestation, and signed updates solve different problems. Choose them against the product's risks and applicable requirements.","Reuse engineering evidence across compliance and certification programs, while assessing each program's scope separately."],"topic":"device-machine-identity","authorId":"https://www.timmcallister.io/#person","reviewedAt":"2026-09-05","sections":[{"title":"Start with the lifetime you are promising","url":"https://www.timmcallister.io/guides/device-identity-lifecycle#start-with-the-lifetime"},{"title":"Separate law, certification, and engineering guidance","url":"https://www.timmcallister.io/guides/device-identity-lifecycle#scope-before-architecture"},{"title":"Five gaps that weaken the lifecycle","url":"https://www.timmcallister.io/guides/device-identity-lifecycle#five-gaps"},{"title":"Build six connected capabilities","url":"https://www.timmcallister.io/guides/device-identity-lifecycle#six-capabilities"},{"title":"Make each lifecycle transition explicit","url":"https://www.timmcallister.io/guides/device-identity-lifecycle#birth-to-retirement"},{"title":"Reserve room for cryptographic change","url":"https://www.timmcallister.io/guides/device-identity-lifecycle#long-lived-design"},{"title":"Sequence the work around evidence","url":"https://www.timmcallister.io/guides/device-identity-lifecycle#sequence-the-work"},{"title":"A readiness check that reaches the device","url":"https://www.timmcallister.io/guides/device-identity-lifecycle#readiness-checklist"}],"references":[{"label":"Cyber Resilience Act: scope, obligations, Annex I, and application dates","url":"https://eur-lex.europa.eu/eli/reg/2024/2847/oj/eng","note":"Articles 2, 14, 69, and 71; Annex I. Applicability and transition provisions matter."},{"label":"RED cybersecurity delegated regulation","url":"https://eur-lex.europa.eu/eli/reg_del/2022/30/oj/eng","note":"Defines which radio-equipment categories are subject to the specified essential requirements."},{"label":"RED amendment setting the 1 August 2025 application date","url":"https://eur-lex.europa.eu/eli/reg_del/2023/2444/oj/eng"},{"label":"Connectivity Standards Alliance: Matter FAQs","url":"https://csa-iot.org/all-solutions/matter/matter-faq/","note":"Matter certification and device-attestation context."},{"label":"Matter Core Specification 1.2","url":"https://csa-iot.org/wp-content/uploads/2023/10/Matter-1.2-Core-Specification.pdf","note":"Public reference for the PAA, PAI, DAC chain and separate operational credentials; use the applicable certification version for implementation."},{"label":"SAE J3101: Hardware Protected Security for Ground Vehicles","url":"https://saemobilus.sae.org/standards/j3101_202002-hardware-protected-security-ground-vehicles","note":"The published scope concerns hardware-protected vehicle security, not an EVPKI root hierarchy."},{"label":"CharIN: Plug & Charge","url":"https://www.charin.global/technology/plug-charge/","note":"ISO 15118 interoperability and charging-PKI governance context."},{"label":"NISTIR 8259A: IoT Device Cybersecurity Capability Core Baseline","url":"https://csrc.nist.gov/pubs/ir/8259/a/final"},{"label":"NIST SP 800-193: Platform Firmware Resiliency Guidelines","url":"https://csrc.nist.gov/pubs/sp/800/193/final"},{"label":"RFC 7030: Enrollment over Secure Transport","url":"https://www.rfc-editor.org/info/rfc7030/"},{"label":"RFC 8995: Bootstrapping Remote Secure Key Infrastructure","url":"https://www.rfc-editor.org/info/rfc8995/"},{"label":"RFC 9334: Remote Attestation Procedures Architecture","url":"https://www.rfc-editor.org/info/rfc9334/","note":"Distinguishes attestation evidence, appraisal, and relying-party decisions."}],"referencesUrl":"https://www.timmcallister.io/guides/device-identity-lifecycle#sources"},{"id":"guide:trust-list-approval","kind":"Field note","title":"When quorum closes the conversation too early","url":"https://www.timmcallister.io/guides/trust-list-approval","description":"A proposed approval pattern that preserves a binding decision and the full review record for trust lists, signing releases, and other consequential changes.","summary":["Reaching an approval threshold and finishing a review window are different events.","Later participation can remain visible without silently changing a decision already recorded under policy.","Make approval, review closure, and release execution explicit so a workflow can travel between interfaces."],"topic":"device-machine-identity","authorId":"https://www.timmcallister.io/#person","reviewedAt":"2026-09-05","sections":[{"title":"A decision can arrive before the review is complete","url":"https://www.timmcallister.io/guides/trust-list-approval#a-small-governance-gap"},{"title":"Separate the decision from the participation window","url":"https://www.timmcallister.io/guides/trust-list-approval#two-separate-clocks"},{"title":"A portable state model","url":"https://www.timmcallister.io/guides/trust-list-approval#portable-state-model"},{"title":"Make the record independent of the interface","url":"https://www.timmcallister.io/guides/trust-list-approval#record-and-interface"},{"title":"Test the policy before adopting the pattern","url":"https://www.timmcallister.io/guides/trust-list-approval#test-before-adoption"}],"references":[{"label":"CharIN: Plug & Charge and certificate-trust-list governance","url":"https://www.charin.global/technology/plug-charge/","note":"Public ecosystem context; it does not establish or endorse the approval pattern proposed here."},{"label":"GitHub documentation: protected branches","url":"https://docs.github.com/en/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches","note":"A concrete reference for required reviews and stale-approval controls, not a trust-list approval standard."}],"referencesUrl":"https://www.timmcallister.io/guides/trust-list-approval#sources"},{"id":"guide:software-assurance-cra","kind":"Practical guide","title":"Software assurance: make the product evidence usable","url":"https://www.timmcallister.io/guides/software-assurance-cra","description":"A practical operating model for secure releases, vulnerability response, and EU Cyber Resilience Act readiness.","summary":["Start with a product and release version. Connect components, build provenance, signing approval, support commitments, and vulnerability decisions to that record.","Treat CRA reporting readiness and product conformity as separate workstreams with different dates and owners.","Use shared security services where they help, while keeping product accountability, evidence access, and recovery explicit."],"topic":"software-assurance","authorId":"https://www.timmcallister.io/#person","reviewedAt":"2026-09-05","sections":[{"title":"Start with the product a customer actually receives","url":"https://www.timmcallister.io/guides/software-assurance-cra#product-first"},{"title":"Set the CRA boundary before selecting controls","url":"https://www.timmcallister.io/guides/software-assurance-cra#scope-and-dates"},{"title":"Connect six records to every important release","url":"https://www.timmcallister.io/guides/software-assurance-cra#evidence-chain"},{"title":"Make signing an accountable release decision","url":"https://www.timmcallister.io/guides/software-assurance-cra#signing-and-provenance"},{"title":"Prepare the reporting path before the clock starts","url":"https://www.timmcallister.io/guides/software-assurance-cra#reporting-clock"},{"title":"Share capabilities without losing accountability","url":"https://www.timmcallister.io/guides/software-assurance-cra#shared-services"},{"title":"Measure readiness with an evidence drill","url":"https://www.timmcallister.io/guides/software-assurance-cra#readiness-ladder"},{"title":"Choose a narrow starting point and prove it works","url":"https://www.timmcallister.io/guides/software-assurance-cra#first-actions"}],"references":[{"label":"European Commission — CRA legislative summary","url":"https://digital-strategy.ec.europa.eu/en/policies/cra-summary","note":"Scope, manufacturer responsibilities, conformity, and application dates."},{"label":"European Commission — CRA reporting obligations","url":"https://digital-strategy.ec.europa.eu/en/policies/cra-reporting","note":"Reporting triggers, platform, and staged notifications."},{"label":"Regulation (EU) 2024/2847 — Cyber Resilience Act","url":"https://eur-lex.europa.eu/eli/reg/2024/2847/oj/eng","note":"Authoritative text. Article 14 distinguishes final-report clocks; use the full text for product-specific determinations."},{"label":"NIST SP 800-218 — Secure Software Development Framework","url":"https://csrc.nist.gov/pubs/sp/800/218/final","note":"A structure for secure development practices."},{"label":"SLSA specification, version 1.2","url":"https://slsa.dev/spec/v1.2/about","note":"Supply-chain integrity and provenance; not a claim that an artifact is vulnerability-free."}],"referencesUrl":"https://www.timmcallister.io/guides/software-assurance-cra#sources"},{"id":"guide:funding-digital-trust","kind":"Practical guide","title":"Funding digital trust with your own evidence","url":"https://www.timmcallister.io/guides/funding-digital-trust","description":"Build a decision around operating costs, required capabilities, and testable risk reduction. Make every assumption visible.","summary":["Use your organization’s workload, incident, and recovery records as the baseline.","Show operating savings separately from uncertain risk reduction and non-optional obligations.","Fund a bounded improvement with measurable acceptance criteria, then revisit the case with observed results."],"topic":"software-assurance","authorId":"https://www.timmcallister.io/#person","reviewedAt":"2026-09-05","sections":[{"title":"Name the decision the funding will change","url":"https://www.timmcallister.io/guides/funding-digital-trust#decision"},{"title":"Collect a baseline people can challenge","url":"https://www.timmcallister.io/guides/funding-digital-trust#baseline"},{"title":"Keep three kinds of value distinct","url":"https://www.timmcallister.io/guides/funding-digital-trust#three-columns"},{"title":"Show the arithmetic and the assumptions","url":"https://www.timmcallister.io/guides/funding-digital-trust#calculation"},{"title":"Buy evidence before buying the whole forecast","url":"https://www.timmcallister.io/guides/funding-digital-trust#pilot"},{"title":"Make the approval a reviewable commitment","url":"https://www.timmcallister.io/guides/funding-digital-trust#review"}],"references":[{"label":"NIST Cybersecurity Framework","url":"https://www.nist.gov/cyberframework","note":"A common structure for cybersecurity outcomes, governance, and organizational profiles."},{"label":"NIST IR 8286 Revision 1 — Cybersecurity and Enterprise Risk Management","url":"https://csrc.nist.gov/pubs/ir/8286/r1/final","note":"December 2025 revision. Connects cybersecurity risk information, risk registers, and enterprise objectives. The calculations and pilot suggestions above are an editorial decision framework."}],"referencesUrl":"https://www.timmcallister.io/guides/funding-digital-trust#sources"},{"id":"guide:pqc-first-five-actions","kind":"Guide","title":"PQC readiness: the first five actions","url":"https://www.timmcallister.io/guides/pqc-first-five-actions","description":"Five practical actions that turn post-quantum planning into an inventory, tested deployment paths, and supplier commitments.","summary":["Start with an owned cryptographic inventory and a priority list based on sensitive information and difficult upgrade paths.","Test hybrid TLS, private certificates, and software signatures as distinct changes with explicit consumer support.","Make supplier commitments specific enough to plan, test, and track over the supported product lifetime."],"topic":"cryptographic-change","authorId":"https://www.timmcallister.io/#person","reviewedAt":"2026-09-05","sections":[{"title":"Start with decisions you can verify","url":"https://www.timmcallister.io/guides/pqc-first-five-actions#starting-point"},{"title":"1. Build an inventory that reaches beyond certificates","url":"https://www.timmcallister.io/guides/pqc-first-five-actions#inventory"},{"title":"2. Test hybrid key establishment on a priority TLS path","url":"https://www.timmcallister.io/guides/pqc-first-five-actions#hybrid-tls"},{"title":"3. Run a controlled ML-DSA private-PKI pilot","url":"https://www.timmcallister.io/guides/pqc-first-five-actions#private-pki"},{"title":"4. Rehearse a software-signing transition","url":"https://www.timmcallister.io/guides/pqc-first-five-actions#software-signing"},{"title":"5. Put cryptographic change into supplier requirements","url":"https://www.timmcallister.io/guides/pqc-first-five-actions#supplier-commitments"},{"title":"Review evidence before expanding","url":"https://www.timmcallister.io/guides/pqc-first-five-actions#next-review"}],"references":[{"label":"CISA, NIST, and NSA: preparing for PQC","url":"https://www.nsa.gov/Press-Room/Press-Releases-Statements/Press-Release-View/Article/3498776/post-quantum-cryptography-cisa-nist-and-nsa-recommend-how-to-prepare-now/","note":"Inventory, roadmap, supplier engagement, and prioritization recommendations."},{"label":"IETF RFC 10024: hybrid key agreement for TLS 1.3","url":"https://www.rfc-editor.org/rfc/rfc10024.html","note":"Standardized hybrid groups, including X25519MLKEM768."},{"label":"NIST FIPS 204: ML-DSA","url":"https://csrc.nist.gov/pubs/fips/204/final","note":"Final digital-signature standard and current implementation notices."},{"label":"IETF RFC 9881: ML-DSA in X.509","url":"https://www.rfc-editor.org/rfc/rfc9881.html","note":"Certificate algorithm identifiers, encodings, and key usage."},{"label":"NIST SP 800-208: stateful hash-based signatures","url":"https://csrc.nist.gov/pubs/sp/800/208/final","note":"Special operational requirements for stateful signature schemes."}],"referencesUrl":"https://www.timmcallister.io/guides/pqc-first-five-actions#sources"},{"id":"guide:pqc-migration","kind":"Guide","title":"PQC migration: build the ability to change cryptography","url":"https://www.timmcallister.io/guides/pqc-migration","description":"A practical architecture and roadmap for moving from an algorithm inventory to tested post-quantum deployment.","summary":["Prioritize migration using confidentiality lifetime, business impact, and the time required to change dependent systems.","Treat key establishment, certificate authentication, and software signatures as separate workstreams with shared inventory and governance.","Measure readiness through successful changes and recovery exercises across real consumers, including devices and suppliers."],"topic":"cryptographic-change","authorId":"https://www.timmcallister.io/#person","reviewedAt":"2026-09-05","sections":[{"title":"Make the next cryptographic change manageable","url":"https://www.timmcallister.io/guides/pqc-migration#outcome"},{"title":"Separate the cryptographic jobs","url":"https://www.timmcallister.io/guides/pqc-migration#separate-functions"},{"title":"Rank exposure before selecting a pilot","url":"https://www.timmcallister.io/guides/pqc-migration#prioritize-exposure"},{"title":"Apply the right timetable to the right systems","url":"https://www.timmcallister.io/guides/pqc-migration#planning-dates"},{"title":"Close the gaps a library upgrade leaves behind","url":"https://www.timmcallister.io/guides/pqc-migration#readiness-gaps"},{"title":"Connect six operating capabilities","url":"https://www.timmcallister.io/guides/pqc-migration#architecture"},{"title":"Use pilots to expose the migration cost","url":"https://www.timmcallister.io/guides/pqc-migration#pilot-evidence"},{"title":"Fund a roadmap with evidence gates","url":"https://www.timmcallister.io/guides/pqc-migration#roadmap"},{"title":"Assess readiness through observable evidence","url":"https://www.timmcallister.io/guides/pqc-migration#readiness-ladder"}],"references":[{"label":"NIST FIPS 203: ML-KEM","url":"https://csrc.nist.gov/pubs/fips/203/final","note":"Key-encapsulation standard; review the publication's current errata when selecting implementations."},{"label":"NIST FIPS 204: ML-DSA","url":"https://csrc.nist.gov/pubs/fips/204/final","note":"Digital-signature standard, including current implementation notices."},{"label":"NIST FIPS 205: SLH-DSA","url":"https://csrc.nist.gov/pubs/fips/205/final","note":"Stateless hash-based digital signatures."},{"label":"IETF RFC 10024: hybrid key agreement for TLS 1.3","url":"https://www.rfc-editor.org/rfc/rfc10024.html","note":"Published August 2026; specifies three ECDHE and ML-KEM hybrid groups."},{"label":"IETF RFC 9881: ML-DSA in X.509","url":"https://www.rfc-editor.org/rfc/rfc9881.html","note":"Algorithm identifiers and encoding rules do not establish support in every relying application."},{"label":"NIST CSWP 39, updated: considerations for crypto agility","url":"https://csrc.nist.gov/pubs/cswp/39/upd1/considerations-for-achieving-crypto-agility/final","note":"Current version includes updates through 29 June 2026."},{"label":"CISA, NIST, and NSA: preparing for PQC","url":"https://www.nsa.gov/Press-Room/Press-Releases-Statements/Press-Release-View/Article/3498776/post-quantum-cryptography-cisa-nist-and-nsa-recommend-how-to-prepare-now/","note":"Joint recommendations on inventory, supplier engagement, and migration priorities."},{"label":"Executive Order 14412: advanced cryptographic attacks","url":"https://www.whitehouse.gov/presidential-actions/2026/06/securing-the-nation-against-advanced-cryptographic-attacks/","note":"Sections 4 and 6 distinguish federal priority-system dates from contractor rulemaking."},{"label":"NSA CNSA 2.0 FAQ, version 2.1","url":"https://media.defense.gov/2022/Sep/07/2003071836/-1/-1/1/CSI_CNSA_2.0_FAQ_.PDF","note":"National Security System acquisition, equipment, algorithm-use, and validation requirements."},{"label":"CA/Browser Forum TLS Baseline Requirements","url":"https://cabforum.org/working-groups/server/baseline-requirements/requirements/","note":"Public TLS validity and validation-reuse schedule; distinct from PQC deployment requirements."}],"referencesUrl":"https://www.timmcallister.io/guides/pqc-migration#sources"},{"id":"guide:pki-operations","kind":"Guide","title":"PKI operations: from renewal alerts to a managed service","url":"https://www.timmcallister.io/guides/pki-operations","description":"Build certificate operations that can handle shorter lifetimes, changing trust policies, and the next algorithm transition.","summary":["Measure renewal through successful deployment and consumer validation, with enough time left to recover from failure.","Connect discovery, issuance policy, automation, key protection, and service ownership across public and private PKI.","Use real failure exercises and portable evidence to evaluate operating maturity and supplier claims."],"topic":"cryptographic-change","authorId":"https://www.timmcallister.io/#person","reviewedAt":"2026-09-05","sections":[{"title":"Define the service you need","url":"https://www.timmcallister.io/guides/pki-operations#operating-outcome"},{"title":"Plan around the adopted public TLS schedule","url":"https://www.timmcallister.io/guides/pki-operations#public-tls-calendar"},{"title":"Review client identity dependencies before renewal changes","url":"https://www.timmcallister.io/guides/pki-operations#client-identity"},{"title":"Find the gaps between the dashboard and production","url":"https://www.timmcallister.io/guides/pki-operations#common-gaps"},{"title":"Connect policy to the running endpoint","url":"https://www.timmcallister.io/guides/pki-operations#service-architecture"},{"title":"Choose automation by demonstrated behavior","url":"https://www.timmcallister.io/guides/pki-operations#automation-design"},{"title":"Require an end-to-end renewal demonstration","url":"https://www.timmcallister.io/guides/pki-operations#prove-renewal"},{"title":"Evaluate hosting and CA choices against your constraints","url":"https://www.timmcallister.io/guides/pki-operations#deployment-choice"},{"title":"Assess maturity by what remains true during failure","url":"https://www.timmcallister.io/guides/pki-operations#maturity-ladder"},{"title":"Use the first quarter to establish evidence","url":"https://www.timmcallister.io/guides/pki-operations#first-quarter"}],"references":[{"label":"CA/Browser Forum TLS Baseline Requirements","url":"https://cabforum.org/working-groups/server/baseline-requirements/requirements/","note":"Sections 4.2.1 and 6.3.2 govern validation reuse and public TLS validity."},{"label":"Chrome Root Program policy, version 1.8","url":"https://googlechrome.github.io/chromerootprogram/crp/policy/","note":"Section 1.3.2 covers dedicated TLS server-authentication hierarchies and issuance dates."},{"label":"NIST SP 800-57 Part 1, revision 5","url":"https://csrc.nist.gov/pubs/sp/800/57/pt1/r5/final","note":"General key-management lifecycle and protection guidance."},{"label":"IETF RFC 8555: ACME","url":"https://www.rfc-editor.org/rfc/rfc8555.html","note":"Standard protocol for certificate management and identifier validation."},{"label":"IETF RFC 7030: Enrollment over Secure Transport","url":"https://www.rfc-editor.org/rfc/rfc7030.html","note":"Certificate enrollment and reenrollment protocol."}],"referencesUrl":"https://www.timmcallister.io/guides/pki-operations#sources"},{"id":"guide:ai-agent-trust","kind":"Brief","title":"AI agents need authority you can constrain and revoke","url":"https://www.timmcallister.io/guides/ai-agent-trust","description":"A field brief on workload identity, delegated permissions, runtime policy, and the evidence needed when an agent gets something wrong.","summary":["Treat an agent that holds credentials and changes systems as privileged automation with an accountable owner.","Connect workload identity to explicit delegation and enforce permissions at every consequential boundary.","Exercise containment and reconstruct the resulting evidence before expanding the agent's authority."],"topic":"ai-trust-in-practice","authorId":"https://www.timmcallister.io/#person","reviewedAt":"2026-09-05","sections":[{"title":"The operating problem is authority","url":"https://www.timmcallister.io/guides/ai-agent-trust#ai-agents-operating-problem"},{"title":"The 60-second summary","url":"https://www.timmcallister.io/guides/ai-agent-trust#ai-agents-sixty-second-summary"},{"title":"Five questions to answer with evidence","url":"https://www.timmcallister.io/guides/ai-agent-trust#ai-agents-five-questions"},{"title":"The control flow, from request to result","url":"https://www.timmcallister.io/guides/ai-agent-trust#ai-agents-visual-control-flow"},{"title":"Keep identity and delegated permission distinct","url":"https://www.timmcallister.io/guides/ai-agent-trust#ai-agents-identity-delegation"},{"title":"Verify components and preserve useful provenance","url":"https://www.timmcallister.io/guides/ai-agent-trust#ai-agents-integrity-provenance"},{"title":"Practice revocation across the whole workflow","url":"https://www.timmcallister.io/guides/ai-agent-trust#ai-agents-revocation-drill"},{"title":"Make the next deployment earn broader authority","url":"https://www.timmcallister.io/guides/ai-agent-trust#ai-agents-next-operating-cycle"}],"references":[{"label":"OWASP: Prompt Injection","url":"https://genai.owasp.org/llmrisk/llm01-prompt-injection/","note":"Untrusted input and the need for controls surrounding model behavior."},{"label":"SPIFFE overview","url":"https://spiffe.io/docs/latest/spiffe-about/overview/","note":"Workload identity and the relationship between SPIFFE and its implementations."},{"label":"IETF RFC 8693: OAuth 2.0 Token Exchange","url":"https://www.rfc-editor.org/rfc/rfc8693.html","note":"Delegation versus impersonation, resource and audience scope, and limits on automatic revocation propagation."},{"label":"IETF RFC 9334: RATS Architecture","url":"https://www.rfc-editor.org/rfc/rfc9334.html","note":"Attestation roles, policy appraisal, and evidence freshness."},{"label":"C2PA Content Credentials explainer","url":"https://spec.c2pa.org/specifications/specifications/2.3/explainer/Explainer.html","note":"Verifiable provenance and the distinction between provenance and factual truth."}],"referencesUrl":"https://www.timmcallister.io/guides/ai-agent-trust#sources"},{"id":"guide:ai-security-operating-model","kind":"Guide","title":"An operating model for production AI security","url":"https://www.timmcallister.io/guides/ai-security-operating-model","description":"Connect model releases, agent authority, data provenance, and runtime evidence so an AI system can be evaluated, constrained, and stopped.","summary":["Start with a consequential workflow and trace its models, data, credentials, decisions, and downstream effects.","Use identity and integrity controls alongside authorization, behavioral evaluation, human oversight, and tested containment.","Collect evidence during normal operation, then map it to the obligations and assurance questions that apply."],"topic":"ai-trust-in-practice","authorId":"https://www.timmcallister.io/#person","reviewedAt":"2026-09-05","sections":[{"title":"Start with the action the system can take","url":"https://www.timmcallister.io/guides/ai-security-operating-model#ai-security-start-with-the-action"},{"title":"Separate risk management from legal applicability","url":"https://www.timmcallister.io/guides/ai-security-operating-model#ai-security-obligations"},{"title":"Find the gaps between individual tools","url":"https://www.timmcallister.io/guides/ai-security-operating-model#ai-security-threats-and-gaps"},{"title":"Six capabilities to connect","url":"https://www.timmcallister.io/guides/ai-security-operating-model#ai-security-reference-architecture"},{"title":"Follow one request through the controls","url":"https://www.timmcallister.io/guides/ai-security-operating-model#ai-security-request-flow"},{"title":"Be precise about what the proof establishes","url":"https://www.timmcallister.io/guides/ai-security-operating-model#ai-security-assurance-limits"},{"title":"Assess readiness through demonstrated behavior","url":"https://www.timmcallister.io/guides/ai-security-operating-model#ai-security-readiness"},{"title":"Build a first operating cycle","url":"https://www.timmcallister.io/guides/ai-security-operating-model#ai-security-ninety-day-plan"}],"references":[{"label":"NIST AI Risk Management Framework","url":"https://www.nist.gov/itl/ai-risk-management-framework","note":"Voluntary risk-management framework; supports the obligations and readiness discussion."},{"label":"NIST Generative AI Profile","url":"https://www.nist.gov/publications/artificial-intelligence-risk-management-framework-generative-artificial-intelligence","note":"Companion guidance for generative AI risk management and evaluation."},{"label":"European Commission AI Act implementation timeline","url":"https://ai-act-service-desk.ec.europa.eu/en/ai-act/eu-ai-act-implementation-timeline","note":"Staged application and the specific Article 50(2) transition, reviewed 5 September 2026."},{"label":"European Commission: AI Omnibus enters into force","url":"https://digital-strategy.ec.europa.eu/en/news/ai-omnibus-enters-force","note":"Amended high-risk timetable and entry into force on 27 July 2026."},{"label":"OWASP: Prompt Injection","url":"https://genai.owasp.org/llmrisk/llm01-prompt-injection/","note":"Prompt-injection risks and surrounding security controls."},{"label":"SPIFFE overview","url":"https://spiffe.io/docs/latest/spiffe-about/overview/","note":"Open workload-identity specifications and short-lived identity documents."},{"label":"C2PA Content Credentials explainer","url":"https://spec.c2pa.org/specifications/specifications/2.3/explainer/Explainer.html","note":"Provenance, verification, incomplete history, and limits on establishing truth."},{"label":"IETF RFC 9334: RATS Architecture","url":"https://www.rfc-editor.org/rfc/rfc9334.html","note":"Remote-attestation roles, evidence appraisal, and freshness considerations."}],"referencesUrl":"https://www.timmcallister.io/guides/ai-security-operating-model#sources"}],"articles":[{"id":"article:article-93ec20e20930","title":"AI Agents Hacked Hugging Face Using Access OpenAI Gave Them","url":"https://www.timmcallister.io/writing/ai-agents-hacked-hugging-face-using-access-openai-gave-them","description":"The agents got past OpenAI’s firewall by using a software server OpenAI had set up for them, and the tests kept running through two months of warning signs. A reconstruction from the incident reports, and what it means for any company deploying AI agents.","category":"AI Security","authorId":"https://www.timmcallister.io/#person","datePublished":"2026-10-18","publicationHistory":{"originalUrl":"https://www.timmcallister.io/writing/ai-agents-hacked-hugging-face-using-access-openai-gave-them","publicationUrls":["https://www.timmcallister.io/writing/ai-agents-hacked-hugging-face-using-access-openai-gave-them"]}},{"id":"article:article-3c01107eb695","title":"A Cyberattack Forced Supermarkets to Destroy Food. The Bill Could Reach Tens of Millions.","url":"https://www.timmcallister.io/writing/who-gets-to-change-the-temperature","description":"France’s refrigeration attack hit about 700 supermarkets. What manufacturers need to learn about remote access, local control and OT security.","category":"IoT/OT","authorId":"https://www.timmcallister.io/#person","datePublished":"2026-10-13","publicationHistory":{"originalUrl":"https://www.timmcallister.io/writing/who-gets-to-change-the-temperature","publicationUrls":["https://www.timmcallister.io/writing/who-gets-to-change-the-temperature"]}},{"id":"article:article-c952184bddb9","title":"The 24-Hour Clock Is Already Running","url":"https://www.timmcallister.io/writing/the-24-hour-clock-is-already-running","description":"CRA reporting duties are live. Can your team identify affected product versions and file an early warning within 24 hours of awareness?","category":"IoT/OT","authorId":"https://www.timmcallister.io/#person","datePublished":"2026-10-11","publicationHistory":{"originalUrl":"https://www.timmcallister.io/writing/the-24-hour-clock-is-already-running","publicationUrls":["https://www.timmcallister.io/writing/the-24-hour-clock-is-already-running"]}},{"id":"article:article-5b9e9c32cd8a","title":"The Script Kiddie Has a Copilot Now","url":"https://www.timmcallister.io/writing/the-script-kiddie-has-a-copilot-now","description":"An exposed résumé request leads to a harder question about how much an attacker needs to know","category":"AI Security","authorId":"https://www.timmcallister.io/#person","datePublished":"2026-10-09","publicationHistory":{"originalUrl":"https://www.timmcallister.io/writing/the-script-kiddie-has-a-copilot-now","publicationUrls":["https://www.timmcallister.io/writing/the-script-kiddie-has-a-copilot-now"]}},{"id":"article:article-select26-20261004","title":"When Software Starts Acting for US","url":"https://www.timmcallister.io/writing/when-software-starts-acting-for-us","description":"Woz, AI agents, and what SELECT26 revealed about the next era of building.","category":"AI Security","authorId":"https://www.timmcallister.io/#person","datePublished":"2026-10-04T07:00:00.000Z","publicationHistory":{"originalUrl":"https://www.timmcallister.io/writing/when-software-starts-acting-for-us","publicationUrls":["https://www.timmcallister.io/writing/when-software-starts-acting-for-us"]}},{"id":"article:article-0352b29eec74","title":"When Great Writing Becomes Cheap, Is Your Point Worth Reading?","url":"https://www.timmcallister.io/writing/when-great-writing-becomes-cheap","description":"AI can supply the craft. You still owe the reader a point worth making—and evidence that it’s true. Three checks before you publish.","category":"AI Security","authorId":"https://www.timmcallister.io/#person","datePublished":"2026-09-26T18:54:59Z","publicationHistory":{"originalUrl":"https://www.timmcallister.io/writing/when-great-writing-becomes-cheap","publicationUrls":["https://www.timmcallister.io/writing/when-great-writing-becomes-cheap"]}},{"id":"article:article-ot-isolation-20260922","title":"Beyond the OT isolation assumption","url":"https://www.timmcallister.io/writing/beyond-the-ot-isolation-assumption","description":"Forescout’s segmentation findings challenge the assumption that OT is isolated. NIST’s new draft shows how stronger architecture, device identity, trusted updates, and tested recovery can narrow the gap.","category":"IoT/OT","authorId":"https://www.timmcallister.io/#person","datePublished":"2026-09-22","publicationHistory":{"originalUrl":"https://www.timmcallister.io/writing/beyond-the-ot-isolation-assumption","publicationUrls":["https://www.timmcallister.io/writing/beyond-the-ot-isolation-assumption"]}},{"id":"article:article-lakana-360-surveillance-20260913","title":"The surveillance platform that outlived the account","url":"https://www.timmcallister.io/writing/the-surveillance-platform-that-outlived-the-account","description":"Anthropic banned the account used to engineer Mali’s Lakana 360 surveillance platform. The locally deployed system was unaffected.","category":"AI Security","authorId":"https://www.timmcallister.io/#person","datePublished":"2026-09-13","publicationHistory":{"originalUrl":"https://www.timmcallister.io/writing/the-surveillance-platform-that-outlived-the-account","publicationUrls":["https://www.timmcallister.io/writing/the-surveillance-platform-that-outlived-the-account"]}},{"id":"article:article-openai-agents-organizing-20260908","title":"OpenAI’s Agents Were Organizing in Plain Sight","url":"https://www.timmcallister.io/writing/openai-agents-organizing-in-plain-sight","description":"OpenAI agents used a public wiki to exchange answers, revise procedures, and preserve shared work. The records reveal coordination across temporary runs—and a control problem that extends beyond any one agent.","category":"AI Security","authorId":"https://www.timmcallister.io/#person","datePublished":"2026-09-08T08:08:19.251000Z","publicationHistory":{"originalUrl":"https://www.timmcallister.io/writing/openai-agents-organizing-in-plain-sight","publicationUrls":["https://www.timmcallister.io/writing/openai-agents-organizing-in-plain-sight"]}},{"id":"article:article-b65e60bc909d","title":"EU CRA reporting starts Friday, September 11, 2026","url":"https://www.timmcallister.io/writing/cra-oem-deadlines-2026-2027","description":"The reporting obligation starts this Friday. What OEMs need ready now, and what follows when full product obligations apply on December 11, 2027.","category":"Industry Analysis","authorId":"https://www.timmcallister.io/#person","datePublished":"2026-09-08","publicationHistory":{"originalUrl":"https://www.timmcallister.io/writing/cra-oem-deadlines-2026-2027","publicationUrls":["https://www.timmcallister.io/writing/cra-oem-deadlines-2026-2027"]}},{"id":"article:archive-13d927caf0dddf9c","title":"The vulnerability was real. The attack was not.","url":"https://www.timmcallister.io/writing/the-vulnerability-was-real-the-attack-was-not-13d927ca","description":"One word in Microsoft’s revision note caught my eye: “informational.” The underlying change was anything but routine. Microsoft had published CVE-2026-69836 as an exploited…","category":"Industry Analysis","authorId":"https://www.timmcallister.io/#person","datePublished":"2026-08-23T19:39:05Z","publicationHistory":{"originalUrl":"https://timmcallister.substack.com/p/the-vulnerability-was-real-the-attack","publicationUrls":["https://medium.com/@emergentcap/the-vulnerability-was-real-the-attack-was-not-e6734ff3b702","https://timmcallister.substack.com/p/the-vulnerability-was-real-the-attack"]}},{"id":"article:archive-81d6381cb44028e6","title":"CISA’s SBOM Guidance Is Not a Law. It May Still Decide Who Gets In.","url":"https://www.timmcallister.io/writing/cisas-sbom-guidance-is-not-a-law-it-may-still-decide-who-gets-in-81d6381c","description":"The question after the July 29, 2026 2026 Minimum Elements for a Software Bill of Materials update is not whether every software company must sign an SBOM. The joint guidance,…","category":"Industry Analysis","authorId":"https://www.timmcallister.io/#person","datePublished":"2026-08-06T16:12:04Z","publicationHistory":{"originalUrl":"https://timmcallister.substack.com/p/cisas-sbom-guidance-is-not-a-law","publicationUrls":["https://medium.com/@emergentcap/cisas-sbom-guidance-is-not-a-law-it-may-still-decide-who-gets-in-b532898aad31","https://timmcallister.substack.com/p/cisas-sbom-guidance-is-not-a-law"]}},{"id":"article:archive-f145b0dcfb48fd8a","title":"Iran May Be Behind the Water Attacks. Who Left the Controllers Reachable?","url":"https://www.timmcallister.io/writing/iran-may-be-behind-the-water-attacks-who-left-the-controllers-reachable-f145b0dc","description":"On Thursday, the FBI gave the water-sector cyberattack story its first national count. Utilities in at least seven states had reported incidents since July 27, and some had…","category":"IoT/OT","authorId":"https://www.timmcallister.io/#person","datePublished":"2026-08-04T04:11:08Z","publicationHistory":{"originalUrl":"https://timmcallister.substack.com/p/iran-may-be-behind-the-water-attacks","publicationUrls":["https://medium.com/@emergentcap/iran-may-be-behind-the-water-attacks-who-left-the-controllers-reachable-9fe0281b72de","https://timmcallister.substack.com/p/iran-may-be-behind-the-water-attacks"]}},{"id":"article:archive-3af154e35408fd4c","title":"If You Use Public Certificates for mTLS, Start Looking Now","url":"https://www.timmcallister.io/writing/if-you-use-public-certificates-for-mtls-start-looking-now-3af154e3","description":"A few weeks ago, I was on a customer call while one of my colleagues ran through the certificate changes coming at the industry. There were six in less than two minutes. One of…","category":"PKI","authorId":"https://www.timmcallister.io/#person","datePublished":"2026-07-26T05:01:20Z","publicationHistory":{"originalUrl":"https://timmcallister.substack.com/p/if-you-use-public-certificates-for","publicationUrls":["https://medium.com/@emergentcap/if-you-use-public-certificates-for-mtls-start-looking-now-ff0e586e5e76","https://timmcallister.substack.com/p/if-you-use-public-certificates-for"]}},{"id":"article:archive-98b05d47ce8c9345","title":"The Firewall Is the Vulnerability, AGAIN","url":"https://www.timmcallister.io/writing/the-firewall-is-the-vulnerability-again-98b05d47","description":"Another week, another version of the same story. Eduard Kovacs at SecurityWeek reported that three recently patched Fortinet FortiSandbox vulnerabilities (CVE-2026-39808,…","category":"Industry Analysis","authorId":"https://www.timmcallister.io/#person","datePublished":"2026-06-20T19:34:19Z","publicationHistory":{"originalUrl":"https://timmcallister.substack.com/p/the-firewall-is-the-vulnerability","publicationUrls":["https://medium.com/@emergentcap/the-firewall-is-the-vulnerability-again-899f4ec20ff9","https://timmcallister.substack.com/p/the-firewall-is-the-vulnerability"]}},{"id":"article:archive-30505f150401637e","title":"Anthropic Didn’t Raise Your Price on June 15. It Started a Meter You Can’t See. [Add: Burn-Safe Token Ledger]","url":"https://www.timmcallister.io/writing/anthropic-didnt-raise-your-price-on-june-15-it-started-a-meter-you-cant-see-add-burn-safe-30505f15","description":"You already know which job I’m talking about. The review bot that fires on every push. The 2 a.m. cron. The claude -p helper you run without thinking. Until June 15 all of it…","category":"AI Security","authorId":"https://www.timmcallister.io/#person","datePublished":"2026-06-15T19:48:43Z","publicationHistory":{"originalUrl":"https://timmcallister.substack.com/p/anthropic-didnt-raise-your-price","publicationUrls":["https://timmcallister.substack.com/p/anthropic-didnt-raise-your-price"]}},{"id":"article:archive-ae08e4ff8b92c093","title":"The Quantum Clock Moved. The Deadline Is Already Written.","url":"https://www.timmcallister.io/writing/the-quantum-clock-moved-the-deadline-is-already-written-ae08e4ff","description":"In 2019, the best public estimate for breaking a 2048-bit RSA key put the job at a quantum computer with about twenty million qubits, running for eight hours.² In May 2025, the…","category":"Quantum","authorId":"https://www.timmcallister.io/#person","datePublished":"2026-05-31T17:00:10Z","publicationHistory":{"originalUrl":"https://timmcallister.substack.com/p/the-quantum-clock-moved-the-deadline","publicationUrls":["https://timmcallister.substack.com/p/the-quantum-clock-moved-the-deadline"]}},{"id":"article:archive-59b2e81e9c5a011d","title":"The Internet Already Went Post-Quantum. Nobody Sent a Memo.","url":"https://www.timmcallister.io/writing/the-internet-already-went-post-quantum-nobody-sent-a-memo-59b2e81e","description":"Sometime in the last week of October 2025, the internet crossed a line that should have made headlines. For the first time, more than half of all human web traffic was…","category":"Quantum","authorId":"https://www.timmcallister.io/#person","datePublished":"2026-05-31T01:30:17Z","publicationHistory":{"originalUrl":"https://timmcallister.substack.com/p/the-internet-already-went-post-quantum","publicationUrls":["https://timmcallister.substack.com/p/the-internet-already-went-post-quantum"]}},{"id":"article:archive-c03bc7ef3447562b","title":"Negative Seven Days","url":"https://www.timmcallister.io/writing/negative-seven-days-c03bc7ef","description":"Sometime in May, a group of attackers did something quietly audacious. They pushed a software update called FortiEndpoint_Patch.exe to a fleet of corporate laptops. It looked…","category":"Industry Analysis","authorId":"https://www.timmcallister.io/#person","datePublished":"2026-05-30T05:09:26Z","publicationHistory":{"originalUrl":"https://timmcallister.substack.com/p/negative-seven-days","publicationUrls":["https://medium.com/@emergentcap/negative-seven-days-e5e42fe27990","https://timmcallister.substack.com/p/negative-seven-days"]}},{"id":"article:archive-d7fc8650a2b802d7","title":"Can You Revoke One Device Without Breaking the Fleet?","url":"https://www.timmcallister.io/writing/can-you-revoke-one-device-without-breaking-the-fleet-d7fc8650","description":"Here is the question I ask every connected device manufacturer I sit down with: If one device in your deployed fleet was compromised tomorrow morning, how long would it take to…","category":"PKI","authorId":"https://www.timmcallister.io/#person","datePublished":"2026-05-12T10:00:57Z","publicationHistory":{"originalUrl":"https://timmcallister.substack.com/p/can-you-revoke-one-device-without","publicationUrls":["https://medium.com/@emergentcap/can-you-revoke-one-device-without-breaking-the-fleet-5048394e5b61","https://timmcallister.substack.com/p/can-you-revoke-one-device-without"]}},{"id":"article:archive-258de331cb7583b4","title":"Trust by Configuration Is Dead: What the Vercel Breach Tells Us About the Authentication Crisis","url":"https://www.timmcallister.io/writing/trust-by-configuration-is-dead-what-the-vercel-breach-tells-us-about-the-authentication-cr-258de331","description":"No zero-day. No novel protocol exploit. No sophisticated nation-state tooling. What happened between June 2024 and April 2026 was something more unsettling: a trust model…","category":"PKI","authorId":"https://www.timmcallister.io/#person","datePublished":"2026-04-21T23:49:15Z","publicationHistory":{"originalUrl":"https://timmcallister.substack.com/p/trust-by-configuration-is-dead-what","publicationUrls":["https://medium.com/@emergentcap/trust-by-configuration-is-dead-what-the-vercel-breach-tells-us-about-the-authentication-crisis-29e9f18e54d6","https://timmcallister.substack.com/p/trust-by-configuration-is-dead-what"]}},{"id":"article:archive-5b1a882dba166395","title":"114 companies just told the EU exactly what security infrastructure CRA requires. I read every submission.","url":"https://www.timmcallister.io/writing/114-companies-just-told-the-eu-exactly-what-security-infrastructure-cra-requires-i-read-ev-5b1a882d","description":"Every major device manufacturer in Europe filed comments on the EU Commission’s draft CRA implementation guidance before the March 31 deadline. Siemens. Bosch. Continental.…","category":"Industry Analysis","authorId":"https://www.timmcallister.io/#person","datePublished":"2026-04-06T01:16:31Z","publicationHistory":{"originalUrl":"https://timmcallister.substack.com/p/114-companies-just-told-the-eu-exactly","publicationUrls":["https://timmcallister.substack.com/p/114-companies-just-told-the-eu-exactly"]}},{"id":"article:archive-af39fd50aafb53b2","title":"How I Added AI Video Production to Claude Code in One Afternoon","url":"https://www.timmcallister.io/writing/how-i-added-ai-video-production-to-claude-code-in-one-afternoon-af39fd50","description":"I woke up this morning, watched Nate B. Jones talk about AI tools that most people are sleeping on, and by lunch I had a working video production pipeline inside my CLI. One…","category":"AI Security","authorId":"https://www.timmcallister.io/#person","datePublished":"2026-03-28T05:26:37Z","publicationHistory":{"originalUrl":"https://timmcallister.substack.com/p/how-i-added-ai-video-production-to","publicationUrls":["https://medium.com/@emergentcap/how-i-added-ai-video-production-to-claude-code-in-one-afternoon-9edcb68853aa","https://timmcallister.substack.com/p/how-i-added-ai-video-production-to"]}},{"id":"article:archive-6ecd2dfb3edbdc37","title":"Your MFA Didn't Fail. Your Trust Model Did.","url":"https://www.timmcallister.io/writing/your-mfa-didn-t-fail-your-trust-model-did-6ecd2dfb","description":"On March 11, 2026, someone logged into Stryker’s Microsoft Intune console using a valid administrator account and issued remote wipe commands to tens of thousands of Windows…","category":"PKI","authorId":"https://www.timmcallister.io/#person","datePublished":"2026-03-19T04:08:12Z","publicationHistory":{"originalUrl":"https://timmcallister.substack.com/p/your-mfa-didnt-fail-your-trust-model","publicationUrls":["https://medium.com/@emergentcap/your-mfa-didnt-fail-your-trust-model-did-a9bcf1b30512","https://timmcallister.substack.com/p/your-mfa-didnt-fail-your-trust-model"]}},{"id":"article:archive-0f25ed1d0b27d6b6","title":"The 2026 National Cyber Strategy: What Your CISO Needs to Hear That Nobody Else Will Say","url":"https://www.timmcallister.io/writing/the-2026-national-cyber-strategy-what-your-ciso-needs-to-hear-that-nobody-else-will-say-0f25ed1d","description":"The White House released President Trump’s Cyber Strategy for America on March 7, 2026.⁷ Six pillars. Four pages. Zero implementation timelines. The security industry is…","category":"Industry Analysis","authorId":"https://www.timmcallister.io/#person","datePublished":"2026-03-07T21:55:00Z","publicationHistory":{"originalUrl":"https://timmcallister.substack.com/p/the-2026-national-cyber-strategy","publicationUrls":["https://medium.com/@emergentcap/the-2026-national-cyber-strategy-what-your-ciso-needs-to-hear-that-nobody-else-will-say-2f79fc650f95","https://timmcallister.substack.com/p/the-2026-national-cyber-strategy"]}},{"id":"article:archive-c7f4ee6522863b63","title":"The Ransomware Came From Inside the System","url":"https://www.timmcallister.io/writing/the-ransomware-came-from-inside-the-system-c7f4ee65","description":"On February 11, 2026, an autonomous AI agent decided on its own to destroy a stranger’s reputation. Scott Shambaugh is a volunteer maintainer of Matplotlib, the Python plotting…","category":"AI Security","authorId":"https://www.timmcallister.io/#person","datePublished":"2026-02-22T22:35:21Z","publicationHistory":{"originalUrl":"https://timmcallister.substack.com/p/the-ransomware-came-from-inside-the","publicationUrls":["https://medium.com/@emergentcap/the-ransomware-came-from-inside-the-system-67482de50be5","https://timmcallister.substack.com/p/the-ransomware-came-from-inside-the"]}},{"id":"article:archive-5235e8f43da65df3","title":"Hardening Claude Code: A Security Review Framework and the Prompt That Does It For You","url":"https://www.timmcallister.io/writing/hardening-claude-code-a-security-review-framework-and-the-prompt-that-does-it-for-you-5235e8f4","description":"You’ve installed Claude Code. You’re shipping faster than ever. But have you stopped to assess what your AI coding assistant actually has access to?","category":"AI Security","authorId":"https://www.timmcallister.io/#person","datePublished":"2026-02-15T01:19:01Z","publicationHistory":{"originalUrl":"https://timmcallister.substack.com/p/hardening-claude-code-a-security","publicationUrls":["https://medium.com/@emergentcap/hardening-claude-code-a-security-review-framework-and-the-prompt-that-does-it-for-you-c546831f2cec","https://timmcallister.substack.com/p/hardening-claude-code-a-security"]}},{"id":"article:archive-8d7d248707bc6ebc","title":"OpenClaw: The Poster Child for AI Autonomy Without Controls","url":"https://www.timmcallister.io/writing/openclaw-the-poster-child-for-ai-autonomy-without-controls-8d7d2487","description":"How viral agentic systems are exposing the gap in intent authorization and governance across digital and physical systems Executive Takeaway","category":"AI Security","authorId":"https://www.timmcallister.io/#person","datePublished":"2026-02-01T18:31:33Z","publicationHistory":{"originalUrl":"https://timmcallister.substack.com/p/openclaw-the-poster-child-for-ai","publicationUrls":["https://medium.com/@emergentcap/openclaw-the-poster-child-for-ai-autonomy-without-controls-fe820fcd1068","https://timmcallister.substack.com/p/openclaw-the-poster-child-for-ai"]}},{"id":"article:archive-cbe99332890b7107","title":"Poland's Power Grid Attack: When Cyber Becomes Physical","url":"https://www.timmcallister.io/writing/poland-s-power-grid-attack-when-cyber-becomes-physical-cbe99332","description":"On December 29, 2025, while Poland endured sub-zero temperatures and snowstorms, attackers systematically compromised approximately 30 wind farms, solar installations, and…","category":"IoT/OT","authorId":"https://www.timmcallister.io/#person","datePublished":"2026-01-31T04:45:17Z","publicationHistory":{"originalUrl":"https://timmcallister.substack.com/p/polands-power-grid-attack-when-cyber","publicationUrls":["https://timmcallister.substack.com/p/polands-power-grid-attack-when-cyber"]}},{"id":"article:archive-479ffcd26583b554","title":"Memento Crypto","url":"https://www.timmcallister.io/writing/memento-crypto-479ffcd2","description":"There’s an ancient practice called memento mori. Latin for “remember that you will die.” Not morbid. Clarifying. The Stoics kept skulls on their desks. Medieval monks inscribed…","category":"Quantum","authorId":"https://www.timmcallister.io/#person","datePublished":"2026-01-20T06:48:41Z","publicationHistory":{"originalUrl":"https://timmcallister.substack.com/p/memento-crypto","publicationUrls":["https://timmcallister.substack.com/p/memento-crypto"]}},{"id":"article:archive-4c95ae4b718938e4","title":"Accidentally topped an AI leaderboard (and I’m not a coder)","url":"https://www.timmcallister.io/writing/accidentally-topped-an-ai-leaderboard-and-im-not-a-coder-4c95ae4b","description":"A 45-minute assessment revealed something counterintuitive about AI fluency. Anyone here come across AI Cred (aicred.ai)? Holiday break confession: I spent the downtime nerding…","category":"AI Security","authorId":"https://www.timmcallister.io/#person","datePublished":"2026-01-11T23:09:37Z","publicationHistory":{"originalUrl":"https://medium.com/@emergentcap/accidentally-topped-an-ai-leaderboard-and-im-not-a-coder-4ec238ea472c","publicationUrls":["https://medium.com/@emergentcap/accidentally-topped-an-ai-leaderboard-and-im-not-a-coder-4ec238ea472c"]}},{"id":"article:archive-f8498d925c9ad314","title":"CES 2026: Software-Defined Everything Meets Physical AI","url":"https://www.timmcallister.io/writing/ces-2026-software-defined-everything-meets-physical-ai-f8498d92","description":"Jensen Huang declared that “the ChatGPT moment for physical AI is here.”[1] For those of us in cybersecurity, that phrase means something very different than it does to most of…","category":"AI Security","authorId":"https://www.timmcallister.io/#person","datePublished":"2026-01-11T18:14:33Z","publicationHistory":{"originalUrl":"https://timmcallister.substack.com/p/ces-2026-software-defined-everything","publicationUrls":["https://timmcallister.substack.com/p/ces-2026-software-defined-everything"]}},{"id":"article:archive-376b955e5f3453ac","title":"🚨 29.7 Tbps: The Day IoT Became the World’s Largest Cyber Army","url":"https://www.timmcallister.io/writing/29-7-tbps-the-day-iot-became-the-worlds-largest-cyber-army-376b955e","description":"On September 2, 2025, the Aisuru botnet launched a 29.7 terabits-per-second DDoS attack—shattering the previous 22.2 Tbps record set just three weeks earlier…","category":"IoT/OT","authorId":"https://www.timmcallister.io/#person","datePublished":"2025-12-10T05:25:38Z","publicationHistory":{"originalUrl":"https://timmcallister.substack.com/p/297-tbps-the-day-iot-became-the-worlds","publicationUrls":["https://timmcallister.substack.com/p/297-tbps-the-day-iot-became-the-worlds"]}},{"id":"article:archive-7acc89c3780d669d","title":"The “Set It and Forget It” Era of Let’s Encrypt is Dead. 💀","url":"https://www.timmcallister.io/writing/the-set-it-and-forget-it-era-of-lets-encrypt-is-dead-7acc89c3","description":"We’ve been talking about the shift to 45-day certificates, but most teams are missing the technical bombshell buried in the roadmap: The 7-Hour Rule.","category":"PKI","authorId":"https://www.timmcallister.io/#person","datePublished":"2025-12-10T00:33:28Z","publicationHistory":{"originalUrl":"https://timmcallister.substack.com/p/the-set-it-and-forget-it-era-of-lets","publicationUrls":["https://timmcallister.substack.com/p/the-set-it-and-forget-it-era-of-lets"]}},{"id":"article:archive-92e9c3732e472232","title":"Your IoT Devices Are Proving Their Identity With Post-It Notes","url":"https://www.timmcallister.io/writing/your-iot-devices-are-proving-their-identity-with-post-it-notes-92e9c373","description":"Researchers at Black Hat Europe just showed how attackers can compromise IoT devices en masse - no software vulnerability required, no IP address needed, works even on internal…","category":"PKI","authorId":"https://www.timmcallister.io/#person","datePublished":"2025-11-30T22:04:43Z","publicationHistory":{"originalUrl":"https://timmcallister.substack.com/p/your-iot-devices-are-proving-their","publicationUrls":["https://medium.com/@emergentcap/your-iot-devices-are-proving-their-identity-with-post-it-notes-efdbbf879251","https://timmcallister.substack.com/p/your-iot-devices-are-proving-their"]}},{"id":"article:archive-d74868515a61319b","title":"The Hidden Risk of AI: Implicit Trust Is the New Zero-Day","url":"https://www.timmcallister.io/writing/the-hidden-risk-of-ai-implicit-trust-is-the-new-zero-day-d7486851","description":"How a poisoned calendar invite let hackers hijack Google Gemini to control a smart home — and why Agentic AI + MCP servers could be far worse.","category":"AI Security","authorId":"https://www.timmcallister.io/#person","datePublished":"2025-08-10T15:34:43Z","publicationHistory":{"originalUrl":"https://timmcallister.substack.com/p/the-hidden-risk-of-ai-implicit-trust","publicationUrls":["https://timmcallister.substack.com/p/the-hidden-risk-of-ai-implicit-trust"]}},{"id":"article:archive-c25afad64c8119f6","title":"AI at Warp Speed: What Mary Meeker’s New Report Really Means","url":"https://www.timmcallister.io/writing/ai-at-warp-speed-what-mary-meekers-new-report-really-means-c25afad6","description":"Mary Meeker’s 340-page Trends – Artificial Intelligence drop is the AI world’s quarterly 10-K. Adoption, spend and competition are screaming up-and-to-the-right, but so are…","category":"AI Security","authorId":"https://www.timmcallister.io/#person","datePublished":"2025-06-04T16:17:15Z","publicationHistory":{"originalUrl":"https://timmcallister.substack.com/p/ai-at-warp-speed-what-mary-meekers","publicationUrls":["https://timmcallister.substack.com/p/ai-at-warp-speed-what-mary-meekers"]}},{"id":"article:archive-61091ac4905f5eaf","title":"OpenAI just made a big round of announcements,","url":"https://www.timmcallister.io/writing/openai-just-made-a-big-round-of-announcements-61091ac4","description":"and while I haven’t tried them all yet, the direction they’re heading is exciting. Here’s a quick breakdown of what they say is launching — and why it could be a big shift for…","category":"AI Security","authorId":"https://www.timmcallister.io/#person","datePublished":"2025-05-16T16:33:41Z","publicationHistory":{"originalUrl":"https://medium.com/@emergentcap/openai-just-made-a-big-round-of-announcements-0c47f3259ab8","publicationUrls":["https://medium.com/@emergentcap/openai-just-made-a-big-round-of-announcements-0c47f3259ab8"]}},{"id":"article:archive-799541862c6266fd","title":"The Poison Apple of Automation: Why Zapier, MCP, and AI Agents Might Be Feeding You Risk in Disguise","url":"https://www.timmcallister.io/writing/the-poison-apple-of-automation-why-zapier-mcp-and-ai-agents-might-be-feeding-you-risk-in-d-79954186","description":"You ever notice how the most dangerous things come dressed up like a gift? That’s the vibe I’ve started to get from automation platforms like Zapier, Make, and now MCP-style…","category":"AI Security","authorId":"https://www.timmcallister.io/#person","datePublished":"2025-05-06T18:25:02Z","publicationHistory":{"originalUrl":"https://timmcallister.substack.com/p/the-poison-apple-of-automation-why","publicationUrls":["https://medium.com/@emergentcap/the-poison-apple-of-ai-automation-ca4cb27d4e0c","https://timmcallister.substack.com/p/the-poison-apple-of-automation-why"]}},{"id":"article:archive-b0b75c2f600df33b","title":"Autobahn of Wireless Broadband","url":"https://www.timmcallister.io/writing/autobahn-of-wireless-broadband-b0b75c2f","description":"I never knew that Dr. Bernardo Huberman was Andrew Huberman’s father. Ever since I began listening to Andrew’s podcast, I always wondered if he was related given the unique…","category":"Industry Analysis","authorId":"https://www.timmcallister.io/#person","datePublished":"2024-12-17T22:14:32Z","publicationHistory":{"originalUrl":"https://medium.com/@emergentcap/autobahn-of-wireless-broadband-e3a0b93e8b4f","publicationUrls":["https://medium.com/@emergentcap/autobahn-of-wireless-broadband-e3a0b93e8b4f"]}},{"id":"article:archive-c4d35258019fb0d3","title":"A $7.1 Billion Reality Check: Getting Ready for Post-Quantum Cryptography","url":"https://www.timmcallister.io/writing/a-7-1-billion-reality-check-getting-ready-for-post-quantum-cryptography-c4d35258","description":"The #WhiteHouse recently dropped some big news: U.S. #federal agencies are expected to spend $7.1 billion over the next decade to switch to post-quantum cryptography (#PQC).…","category":"Quantum","authorId":"https://www.timmcallister.io/#person","datePublished":"2024-08-13T18:54:12Z","publicationHistory":{"originalUrl":"https://medium.com/@emergentcap/a-7-1-billion-reality-check-getting-ready-for-post-quantum-cryptography-db24f92f41f7","publicationUrls":["https://medium.com/@emergentcap/a-7-1-billion-reality-check-getting-ready-for-post-quantum-cryptography-db24f92f41f7"]}},{"id":"article:archive-4594da200d85444c","title":"Crowd, WHO??!! Widespread Global IT Outage Caused By Crowdstrike","url":"https://www.timmcallister.io/writing/crowd-who-widespread-global-it-outage-caused-by-crowdstrike-4594da20","description":"The outage was caused by a faulty update from CrowdStrike that impacted systems running on Windows. The update led to widespread issues, including the infamous “blue screen of…","category":"Industry Analysis","authorId":"https://www.timmcallister.io/#person","datePublished":"2024-07-19T20:59:24Z","publicationHistory":{"originalUrl":"https://medium.com/@emergentcap/crowd-who-widespread-global-it-outage-caused-by-crowdstrike-64f9656d96ba","publicationUrls":["https://medium.com/@emergentcap/crowd-who-widespread-global-it-outage-caused-by-crowdstrike-64f9656d96ba"]}},{"id":"article:archive-c3f0e5140b6a2864","title":"The Quantum Reckoning","url":"https://www.timmcallister.io/writing/the-quantum-reckoning-c3f0e514","description":"Sam Wilkins sat back in his chair, running a hand through his graying hair as he pondered the existential threat sitting in his inbox. It was an advisory from DigiCert, one of…","category":"Quantum","authorId":"https://www.timmcallister.io/#person","datePublished":"2024-04-22T19:11:48Z","publicationHistory":{"originalUrl":"https://medium.com/@emergentcap/the-quantum-reckoning-2b0dfce98af1","publicationUrls":["https://medium.com/@emergentcap/the-quantum-reckoning-2b0dfce98af1"]}},{"id":"article:archive-eb11d42ddcf91f6a","title":"Hedging for Enterprise Cybersecurity?","url":"https://www.timmcallister.io/writing/hedging-for-enterprise-cybersecurity-eb11d42d","description":"I have just been reading Scott Patterson’s (WSJ) Chaos Kings, about Nassim Nicholas Taleb and Mark Spitznagle’s background, development, and experiences related to risk…","category":"Industry Analysis","authorId":"https://www.timmcallister.io/#person","datePublished":"2023-09-16T00:27:25Z","publicationHistory":{"originalUrl":"https://timmcallister.substack.com/p/hedging-for-enterprise-cybersecurity","publicationUrls":["https://medium.com/@emergentcap/hedging-for-enterprise-cybersecurity-d2a87d5bee92","https://timmcallister.substack.com/p/hedging-for-enterprise-cybersecurity"]}},{"id":"article:archive-4c721687860dfca6","title":"The Internet of Confusion","url":"https://www.timmcallister.io/writing/the-internet-of-confusion-4c721687","description":"Why are consumers and businesses failing to understand the Internet of Things (IoT’s) potential? The Internet of Things (IoT) shouldn’t be the discussion point. New insights…","category":"IoT/OT","authorId":"https://www.timmcallister.io/#person","datePublished":"2016-03-24T22:07:09Z","publicationHistory":{"originalUrl":"http://timmcallister.io/2016/03/24/the-internet-of-confusion/","publicationUrls":["http://timmcallister.io/2016/03/24/the-internet-of-confusion/","https://medium.com/@emergentcap/the-internet-of-confusion-d78148811509"]}},{"id":"article:archive-96cf5f14a8f56388","title":"Encryption Needs A Zebracorn","url":"https://www.timmcallister.io/writing/encryption-needs-a-zebracorn-96cf5f14","description":"In the debate over privacy and security, we now need a Zebracorn, a horse, simultaneously of two colors, black and white, as well as being a rare and likely mythical creature.…","category":"Industry Analysis","authorId":"https://www.timmcallister.io/#person","datePublished":"2016-03-16T16:56:17Z","publicationHistory":{"originalUrl":"https://timmcallister.io/2016/03/16/encryption-privacy-vs-security-needs-a-zebracorn/","publicationUrls":["https://medium.com/@emergentcap/encryption-needs-a-zebracorn-c855f4639941","https://timmcallister.io/2016/03/16/encryption-privacy-vs-security-needs-a-zebracorn/"]}}],"resources":[{"kind":"index","title":"Research & source index","url":"https://www.timmcallister.io/research","description":"Public guides, writing, topic scope, source conventions, and citation guidance."},{"kind":"feed","title":"Writing RSS feed","url":"https://www.timmcallister.io/feed.xml","mediaType":"application/rss+xml","description":"Public article titles, summaries, original publication dates, and canonical links."},{"kind":"dataset","title":"AI cybersecurity incident dashboard","url":"https://www.timmcallister.io/ai-incidents","description":"Curated public reports, disclosed security research, evidence qualifications, outcomes, and editorial lessons."},{"kind":"map","title":"AI incident world map","url":"https://www.timmcallister.io/ai-incidents/map","description":"Zoomable affected-region map with documented geography, source evidence, and an explicit list of reports without confirmed locations."},{"kind":"methodology","title":"Incident register methodology","url":"https://www.timmcallister.io/ai-incidents#methodology","description":"Coverage, disclosure dates, evidence limits, and the distinction between observed incidents and demonstrations."},{"kind":"data","title":"AI incident JSON dataset","url":"https://www.timmcallister.io/ai-incidents/data.json","mediaType":"application/json","description":"The public incident register with its source links and review metadata."},{"kind":"feed","title":"AI incident RSS feed","url":"https://www.timmcallister.io/ai-incidents/feed.xml","readerUrl":"https://www.timmcallister.io/ai-incidents/follow","mediaType":"application/rss+xml","description":"Public entries from the AI incident register. Reader instructions explain RSS and provide the feed address."},{"kind":"reference","title":"Forcing Function Calendar","url":"https://www.timmcallister.io/calendar","description":"Dated digital-trust requirements and planning events with source links and scope notes."},{"kind":"landing-page","title":"AI Trust Market Report","url":"https://www.timmcallister.io/ai-trust-market-report","description":"Public report landing page. Subscriber-only report content is outside this catalog."}],"citationGuidance":["Cite Tim McAllister, the exact title, the canonical page URL, and the date shown on that page. Include your access date when a page can change.","Article datePublished is the original publication date, including for migrated articles. A guide reviewedAt date records its stated review date; it is not an original publication date.","Link to an existing section anchor when citing a specific guide finding. For requirements, technical specifications, or vendor findings, consult and cite the linked primary source as well.","Treat operating recommendations and incident lessons as the author's analysis. A linked vendor or researcher claim is not independent verification or an endorsement."]}