Category: Governance & security

All articles

Governance & security
A report can look complete and still be impossible to verify
494 SOC 2 reports, allegedly 99.8% identical, and nothing in the system existed to notice. The uncomfortable part is not the fraud. It is that no automated check would have caught it.
21 August 2026·4 min read
Keep reading →
Governance & security
The confident wrong answer is worse than missing evidence
A governance report told us a site had external sharing disabled. The site permitted anonymous links. Nothing was broken: a correct API returned a default value for a property it had never populated, and the default happened to be the safest word in the enum. Here is the mechanism, the code that reproduces it, Microsoft's own documentation of it, and the discipline that catches the whole class.
11 August 2026·7 min read
Keep reading →
Governance & security
A cookie banner you can prove, with Azure Tables and Functions
The banner you copy from a vendor can itself be a tracker. Build your own instead, with no third parties, and the hard part turns out not to be the banner: it is keeping the proof that the person consented. Here is all of it, from the browser to the Azure Table, step by step.
16 July 2026·7 min read
Keep reading →