- APRA Asked for an Inventory. Have One That Counts.
- Nine Seconds to Volume Delete: A Capability View of the PocketOS Incident
- You Don't Know What Your Agent Will Do. But You Can Know What It Can Do.
- GRASP + CRI: Fast Judgment, Real Controls
- NIST's Agent Standards: The Missing Identity Layer for GRASP
- The Shadow is Cast by the Object: Why "Approved" AI is the Real Risk
- Get a GRASP: A 5-Part Framework for Agent Risk