Notes on information security, written slowly. Mostly AI security, enterprise security and purple teaming, and the small decisions that keep a system boring.