Software Supply Chain
Minimal images, provenance, SBOMs, signing, rebuilds, and transparent exceptions.
See the programResearch // Applied CuriosityObserve.
Observe.
Question.
Build.
The lab studies software supply chains, defensive deception, intelligence fusion, infrastructure automation, and the operational systems around them.
Research areas
Useful research should change how something is built or operated.
Selected work will be published through Lab Notes and the public wiki. Sensitive implementation detail remains controlled.
Defensive Deception
Modular honeypots, sensor telemetry, adversary behavior, and detection engineering.
See WatchtowerIntelligence Fusion
Collection, provenance, entity resolution, correlation, and analyst-centered systems.
See FoxSightControlled Automation
Policy-driven workflows, approvals, connectors, audit evidence, and safe execution.
See AlfredSecure Architecture
Identity, platform boundaries, deployment patterns, observability, and resilience.
Read Lab NotesOperational Analysis
Cyber, military, economic, physical, and open-source information in usable context.
Work with the lab