Experiments, notes and ideas from the space between security and engineering.

How small Bash automation projects teach the foundations of larger software systems: inputs, validation, orchestration, state and separation of concerns.

A vendor-neutral mental model for detection as a system, from telemetry to improvement, rather than a collection of isolated rules.

Automation should support human decision-making instead of blindly replacing it. Inputs, confidence, failure states, idempotency, logging and approval.