Doctrine
Four documents, revised rather than replaced. Doctrine is what an institution writes when the boundary has moved and the rules have not caught up.
The documents
- From air gap to zero trustAn air gap removed the path by which anything inside could be discovered, reached or administered. Connectivity did not have to cost you that last part; opening inbound ports did.
- Governing agentic systemsAn autonomous agent holding credentials is an access problem before it is a model problem. None of the major frameworks was written for this.
- Cloud spend is attack surfaceUnowned resources are unpatched resources. Cost management read as a control discipline rather than a procurement exercise.
- The recommendation nobody acted onEvery argument here ends in an ask that requires somebody to be told they were wrong. Treating that as a communication problem is why sound work stalls.