Topic
Govern at the Choke Point
Governance you can route around is not governance. If a policy lives beside the execution path instead of on it, the first urgent shortcut bypasses it. These pieces argue for governance as a kernel — one mandatory choke point every action passes through, no exceptions, no side doors.
Written for The Guardian — CISO · Head of Security/Compliance.
Govern at the Choke Point
MCP Safety Labels Run on the Honor System. We Checked 31 Popular Servers.
Every MCP tool describes its own risk, and clients take its word. actlint audited 31 popular servers — Stripe, GitHub, Cloudflare, Linear, Firecrawl, and more. Most labels are honest. Four are wrong, and every wrong label fails the same way.
Govern at the Choke Point
Your Agent Doesn't Have a Choke Point
When every agentic feature wires its own way out to production, governance becomes something you re-establish in a dozen places — and you only have it where someone remembered to add it.
Govern at the Choke Point
The Three Things That Break When Agents Touch Production
Most agentic projects don't fail at the model. They fail at the joints - the places where intent meets identity, policy, and consequence.
Field notes on the agentic enterprise.
No noise. A few times a month, when there's something worth saying.