Explore by topic

A technical tutorial on SBOMs and Vulnerability Exploitability eXchange, covering CISA semantics, CSAF, CycloneDX, SPDX, OpenVEX, Log4Shell, automation, interoperability, and practical use under the EU Cyber Resilience Act.

From algebraic foundations and textbook RSA to practical BFV and dependable private computation

Dec 3, 2022

Modified	Aug 22, 2026
Keywords	SBOM, VEX, Vulnerability Exploitability eXchange, CISA, CSAF, CycloneDX, SPDX, OpenVEX, CVE-2021-44228, Log4Shell, Cyber Resilience Act, CRA, vulnerability management, software supply chain
Audiences	practitioner,technical specialist,analyst,consultant
Difficulty	intermediate

Homomorphic Encryption for Developers

A developer-focused tutorial that moves from algebra and textbook RSA to a working BFV implementation, then examines trust boundaries and the obstacles to practical FHE.

A detailed reconstruction of the incident, the malware, and the wider significance for energy and OT security

Jun 23, 2022

Modified	Aug 17, 2026
Keywords	homomorphic encryption, fully homomorphic encryption, partially homomorphic encryption, somewhat homomorphic encryption, privacy-preserving computation, computation on encrypted data, data in use, controlled malleability, semantic security, public-key cryptography, RSA, Paillier cryptosystem, modular arithmetic, number theory, group theory, ring theory, arithmetic circuits, Boolean circuits, lattice-based cryptography, bootstrapping, ciphertext noise, noise budget, circuit depth, relinearization, modulus switching, batching, encrypted cloud computing, privacy-preserving machine learning, federated learning, differential privacy, secure multiparty computation, zero-knowledge proofs, trusted execution environments, private information retrieval, private set intersection, blockchain privacy, threshold cryptography, cryptographic key management, post-quantum cryptography
Audiences	practitioner, researcher, subject-matter-expert, technical specialist
Difficulty	advanced

The December 2025 Cyberattack on Poland’s Energy Sector

A reconstruction of the December 2025 cyberattack on Poland’s energy sector, showing how distributed generation, remote access, weak OT hardening, and fragile recovery paths can become a scalable cyber-physical risk.

Scope, legal roles, secure design, conformity, reporting, and lifecycle assurance across the digital-product supply chain

Mar 25, 2026

Modified	Aug 12, 2026
Keywords	Poland cyberattack, energy sector cybersecurity, OT security, industrial cybersecurity, distributed energy resources, DER cybersecurity, renewable energy cybersecurity, BESS cybersecurity, grid cybersecurity, CERT Polska, DynoWiper, LazyWiper, Sandworm, ELECTRUM, Dragos, ESET, IEC 62443, NIS2, Cyber Resilience Act, Terna Grid Code, CEI 0-16, remote access security, VPN security, RTU security, HMI security, critical infrastructure protection, cyber physical systems, grid connection point, GCP, SCADA security, wiper malware, operational resilience
Audiences	practitioner, subject-matter-expert, technical specialist
Difficulty	intermediate

Cyber Resilience Act: The New Product-Security Baseline

A technical and legal analysis of the EU Cyber Resilience Act, explaining product scope, economic-operator roles, essential cybersecurity requirements, conformity assessment, component dependencies, vulnerability reporting, transition, and practical assurance governance.

The OpenAI–Hugging Face incident and the two regimes of agentic cyber risk

Aug 3, 2026

Modified	Aug 9, 2026
Keywords	Cyber Resilience Act, CRA, Regulation (EU) 2024/2847, products with digital elements, cybersecurity regulation, EU product law, product security, secure by design, secure by default, cybersecurity risk assessment, essential cybersecurity requirements, vulnerability management, vulnerability handling, security updates, support period, software bill of materials, SBOM, remote data-processing solutions, RDPS, conformity assessment, CE marking, EU declaration of conformity, notified bodies, harmonised standards, important products with digital elements, critical products with digital elements, manufacturer obligations, importer obligations, distributor obligations, system integrators, economic operators, product lifecycle security, component due diligence, software dependencies, free and open-source software, FOSS, open-source software stewards, substantial modification, Article 14 reporting, actively exploited vulnerabilities, severe security incidents, ENISA, Single Reporting Platform, market surveillance, administrative fines, product liability, CRA compliance, cybersecurity assurance, procurement assurance, lifecycle governance, technical documentation, continuing conformity
Audiences	analyst, subject-matter-expert, technical specialist
Difficulty	intermediate

When an AI Evaluation Became a Cyber Intrusion

A forensic and governance analysis of the OpenAI–Hugging Face intrusion and Anthropic’s subsequent evaluation incidents, showing how scope-integrity failures, jailbreakable safeguards, open-weight access, and excessive execution authority can externalize frontier-agent cyber risk.

A practical guide to product scope, organisational responsibilities, data obligations, and the February 2027 deadline

Jul 29, 2026

Modified	Jul 31, 2026
Keywords	agentic AI, AI cybersecurity, autonomous agents, cyber intrusion, frontier models, OpenAI, Hugging Face, cryptanalysis, jailbreaks, prompt injection, model safeguards, open-weight models, defensive parity, deliberate pacing, execution authority, zero trust, identity security, Kubernetes security, software supply chain, vulnerability disclosure, AI governance, incident response, model evaluation, capability containment, autonomous cyber operations
Audiences	practitioner, researcher, subject-matter expert, technical specialist
Difficulty	intermediate

The EU Digital Battery Passport: Who Is Affected, What Must Be Done, and When

energy

An evidence-based guide to the European Union’s digital battery passport, explaining which batteries and organisations are affected, what each participant must prepare, and when the principal obligations take effect.

Why European BESS projects require systems engineering, cybersecurity-by-design, and evidence-based commissioning

Jul 18, 2026

Modified	Jul 18, 2026
Keywords	EU Digital Battery Passport, battery passport regulation, Regulation (EU) 2023/1542, digital product passport, Cyber Resilience Act, Regulation (EU) 2024/2847, battery compliance, electric vehicle batteries, EV battery passport, light means of transport batteries, LMT batteries, industrial batteries, battery lifecycle data, battery traceability, battery data governance, battery passport requirements, battery passport deadline, 18 February 2027, economic operators, battery manufacturers, battery importers, battery suppliers, battery management systems, battery state of health, battery state of charge, battery repurposing, battery remanufacturing, battery recycling, circular economy, battery due diligence, battery carbon footprint, recycled content, QR code compliance, DPP Registry, battery passport interoperability, battery passport cybersecurity, products with digital elements, CRA compliance, vulnerability management, cybersecurity risk assessment, software bill of materials, SBOM, battery data access rights, legitimate interest, battery passport service providers, EU battery regulation
Audiences	practitioner, subject-matter-expert, policy-maker
Difficulty	intermediate

From EPC Documentation to System Assurance

European utility-scale battery energy storage systems can no longer be delivered as collections of electrical equipment, supplier packages and conventional commissioning documents. Their market-facing, software-dependent and remotely operated nature requires systems engineering, explicit integration ownership, cybersecurity-by-design, controlled interfaces, evidence-based FAT and SAT, demonstrated recovery and continuous lifecycle assurance.

A review of Banca d’Italia QEF 1009 on Italy’s AI adoption, firm productivity, and policy architecture

Jul 10, 2026

Modified	Jul 18, 2026
Keywords	BESS, battery energy storage system, utility-scale battery storage, energy storage, European energy infrastructure, EPC, Engineering Procurement and Construction, BoP, Balance of Plant, system integrator, systems engineering, system assurance, requirements engineering, requirements traceability, interface control, functional architecture, command authority, command governance, configuration management, verification and validation, V-model, Factory Acceptance Testing, FAT, Site Acceptance Testing, SAT, commissioning, operational validation, operational resilience, cybersecurity by design, OT cybersecurity, industrial control systems, IEC 62443, IEC 62351, NIS2, Cyber Resilience Act, Critical Entities Resilience Directive, Data Act, Batteries Regulation, digital battery passport, supply-chain security, vulnerability management, secure remote access, PAM, SIEM, IDS/DPI, backup and recovery, RTO, RPO, EMS, PPC, SCADA, BMS, PCS, TSO, DSO, grid code, market integration, BRP, BSP, technical debt, lifecycle assurance
Audiences	practitioner, project manager, subject-matter-expert, technical specialist
Difficulty	intermediate

AI Adoption, Productivity, and the Missing Middle

A review of Banca d’Italia QEF 1009 on Italy’s AI adoption gap, the conditions required to convert task-level gains into firm productivity, and the policy ecosystem needed to capture domestic value added.

Gli aggiornamenti Terna agli Allegati A.13, A.69 e A.52 nel quadro europeo di resilienza cyber, NIS2, CRA e Perimetro di Sicurezza Nazionale Cibernetica

Jun 12, 2026

Modified	Jun 12, 2026
Keywords	artificial intelligence, AI adoption, generative AI, productivity, labour productivity, total factor productivity, firm productivity, value added, Banca d’Italia, QEF 1009, Italy, Italian firms, SMEs, industrial policy, innovation policy, digital transformation, operating model, enterprise architecture, complementary assets, absorptive capacity, productivity J-curve, task-based productivity, bottlenecks, production networks, input-output linkages, AI policy, Digital Innovation Hubs, Competence Centers, AI Factories, compute infrastructure, data spaces, technology transfer, vertical applications, missing middle, ecosystem capture, European competitiveness
Audiences	executive, practitioner, subject-matter-expert, technical specialist
Difficulty	introductory

Controllo e Monitoraggio della Rete: la Nuova Postura di Sicurezza degli Impianti Connessi

Gli aggiornamenti Terna agli Allegati A.13, A.69 e A.52 segnano il passaggio da una logica di semplice collegamento dati a una postura architetturale in cui controllo, difesa, monitoraggio, telecomunicazioni, cybersecurity e governance di ciclo di vita diventano proprietà strutturali degli impianti connessi.

How ArchiMate 4 simplifies enterprise modeling while enterprise systems grow more complex, shifting the real challenge from notation to semantic governance and operational evidence

May 16, 2026

Modified	May 17, 2026
Keywords	Terna, Italian power grid, grid code, electricity transmission, critical infrastructure, OT cybersecurity, IT/OT architecture, operational technology, industrial control systems, cyber-physical systems, grid monitoring, grid control, power system security, energy infrastructure, renewable energy, BESS, battery energy storage systems, photovoltaic plants, wind farms, high-voltage substations, 36 kV connection, RTN, UPDM, RTU, SCADA, EMS, BMS, PCS, PPC, MPLS, IEC 60870-5-104, IEC 61850, IEC 62443, NIS2, CRA, PSNC, OT DMZ, jump host, network segmentation, zones and conduits, firewall, SIEM, IDS, NDR, remote access, asset inventory, compliance, resilience, grid observability, telemetry, protection systems, conformance testing, lifecycle governance
Audiences	practitioner, subject-matter-expert, technical specialist
Difficulty	intermediate

ArchiMate 4 and the Cartography of Complexity

ArchiMate 4 simplifies enterprise architecture modeling by reducing conceptual debt, but its real value depends on semantic governance, disciplined repositories, and links between architecture intent and operational evidence.

A Banca d’Italia indicator of cybersecurity vulnerability designed to support creditworthiness evaluation

May 2, 2026

Modified	May 2, 2026
Keywords	ArchiMate 4, ArchiMate 3.2, enterprise architecture, TOGAF, The Open Group, modeling languages, metamodeling, UML, MOF, model driven engineering, architecture governance, semantic governance, architecture repository, Common Domain, architecture domains, viewpoints, specialization, profiles, complexity, socio-technical systems, operational evidence, digital transformation
Audiences	analyst, practitioner, subject-matter expert, technical specialist
Difficulty	intermediate

Measuring Cyber Risk in the Italian Corporate Sector

italy

A review of Banca d’Italia’s cyber risk indicator for Italian firms, showing how cyber vulnerability can become a measurable input for credit risk, resilience, and corporate risk governance.

A practical example of event-log analysis, object-centric modeling, lead-time diagnosis, and planning correction

Jan 24, 2026

Modified	Apr 26, 2026
Keywords	cyber risk, cybersecurity, cyber risk measurement, cyber risk taxonomy, cyber incidents, ransomware, data breach, corporate cybersecurity, cyber resilience, operational risk, credit risk assessment, probability of default, ICAS, Eurosystem collateral framework, Banca d’Italia, financial stability, non financial firms, cyber risk indicator, natural language processing, large language models, text mining, risk analytics, supply chain cyber risk, information security, corporate governance, digital operational resilience
Audiences	executive, policy-amker, practitioner, subject-matter expert, technical specialist
Difficulty	introductory

Process Mining in Manufacturing with Purchased Components and Variable Lead Times

A practical manufacturing process-mining case showing how object-centric event logs can expose supplier lead-time variability, quality-blocked stock, full-kit delays, rework loops, and planning-parameter errors.

A formal and technical view of event-log analysis, object-centric process models, conformance checking, performance diagnosis, and enterprise applications

Dec 13, 2022

Modified	Apr 14, 2026
Keywords	process mining, manufacturing, object-centric process mining, event log, event construction, ERP, MES, WMS, QMS, procurement, supplier lead time, variable lead time, purchased components, production order, sales order, purchase order line, quality lot, warehouse receipt, inventory reservation, full-kit readiness, available stock, physical stock, quality-blocked stock, material availability, critical component, critical path, conformance checking, process variants, directly-follows graph, rework loop, manufacturing execution, S&OP, planning parameters, empirical lead time, data lineage, timestamp governance, semantic validation, enterprise architecture, digital transformation, process intelligence
Audiences	analyst, practitioner, subject-matter-expert, technical specialist
Difficulty	intermediate

Process Mining as Computational Process Intelligence

A formal and architectural account of process mining as computational process intelligence: from event logs, conformance checking and object-centric models to enterprise architecture, transformation control, dynamic allocation and S&OP optimization.

Building an architectural capability to guide technological evolution, manage structural complexity, and evaluate transformation trade-offs in large multinational enterprises

Oct 22, 2023

Modified	Apr 9, 2026
Keywords	process mining, event logs, computational process intelligence, process discovery, conformance checking, performance mining, object-centric process mining, OCEL, XES, Petri nets, directly-follows graph, behavioral entropy, process variants, ERP, business process management, enterprise architecture, data engineering, process intelligence, task mining, process automation, operational excellence, digital transformation, internal control, audit, supply chain, order-to-cash, procure-to-pay
Audiences	practitioner, subject-matter-expert, technical specialist
Difficulty	intermediate

Introducing Enterprise Architecture in a Multinational Company: A Roadmap for Building the Discipline from Scratch

A roadmap for introducing enterprise architecture in a multinational company from scratch, treating architecture as an analytical capability for making complexity intelligible and governing transformation trade-offs.

Engineering quantum resistant web authentication through Merkle commitments, transparency logs, and scalable trust infrastructure

Mar 2, 2018

Modified	Mar 14, 2026
Keywords	enterprise architecture, digital transformation, technology governance, enterprise systems, architectural governance, enterprise complexity, architectural roadmap, enterprise integration, data architecture, cloud transformation
Audiences	executive, practitioner, project manager, subject-matter-expert, technical specialist
Difficulty	intermediate

Quantum-Safe HTTPS Certificates: Google’s Structural Innovation, Technical Foundations, and Governance Implications

A technical analysis of Google’s Merkle Tree Certificate proposal for quantum-safe HTTPS. The article explains how Merkle commitments and Certificate Transparency logs can amortize large post-quantum signatures across millions of certificates, preserve efficient TLS handshakes, and transform WebPKI authentication from repeated signature verification into compact membership proofs, while introducing new operational and governance dependencies around global transparency infrastructure.

Redundancy without replication in quantum information processing

Mar 5, 2026

Modified	Mar 5, 2026
Keywords	post-quantum cryptography, WebPKI, TLS, Merkle trees, certificate transparency, authenticated data structures, Internet security architecture, quantum resistant cryptography, cryptographic scalability, transparency logs
Audiences	practitioner, subject-matter-expert, technical specialist
Difficulty	intermediate

Encrypted Cloning and the Exact Boundary of the No-Cloning Theorem

A technical commentary on encrypted quantum cloning as recoverable redundancy without state replication. The article explains why the protocol remains fully consistent with the No-Cloning Theorem, formalizes its one-time decryption property through quantum channel capacity, antidegradability, and overlapping secret-sharing access structures, and examines its implications for quantum storage, distributed computation, cybersecurity, key custody, and the broader design of systems constrained by…

How quantum attacks turn long-lived signatures into silent integrity and impersonation risks

Jan 16, 2026

Modified	Jan 16, 2026
Keywords	quantum computing, quantum information theory, no-cloning theorem, encrypted cloning, quantum encryption, unitary dynamics, quantum channel capacity, antidegradable channels, multipartite entanglement, one-time decryption, quantum storage, distributed quantum systems, quantum secret sharing, entanglement monogamy, quantum summoning, quantum error correction, quantum cryptography, information-theoretic security, quantum key management, recoverable redundancy, unitarity constraints
Audiences	practitioner, researcher, subject-matter-expert, technical specialist
Difficulty	advanced

When Digital Trust Expires: Quantum Computing and the Collapse of Signature-Based Security

cryptography

A technical analysis of how quantum computing can invalidate long-lived digital signatures, trust anchors, and encrypted archives without causing visible system failure. The article distinguishes delayed decryption, delayed forgery, trust-anchor abuse, and retroactive supply-chain compromise, then develops a cybersecurity and governance programme based on cryptographic discovery, agility, limited authority, segmented trust, evidentiary preservation, and post-quantum migration.

From calendar-driven cycles to signal-driven enterprise adaptation

Dec 26, 2025

Modified	Dec 26, 2025
Keywords	post-quantum cryptography, quantum computing risk, digital signatures, cryptographic trust, delayed forgery, store now forge later, long-lived trust anchors, supply-chain security, cryptographic agility, quantum readiness, cybersecurity governance, enterprise risk management
Audiences	practitioner, subject-matter-expert, technical specialist
Difficulty	intermediate

From S&OP to Continuous Orchestration: Envisioning the Hybrid Enterprise of Humans and AI Agents

This essay examines the evolution of Sales and Operations Planning from periodic, calendar-driven coordination toward continuous, signal-driven orchestration. It envisions a hybrid enterprise in which AI agents manage high-frequency tactical planning within explicit guardrails, while humans retain responsibility for strategy, governance, ethics, and accountability.

Designing the continuously orchestrated enterprise

Sep 28, 2025

Modified	Dec 21, 2025
Keywords	S&OP, continuous orchestration, hybrid enterprise, AI agents, CARO, VAOP, tactical vs strategic planning, human–AI collaboration, organizational governance, adaptive systems
Audiences	executive, practitioner, project manager, subject-matter-expert, technical specialist
Difficulty	intermediate

From Planning to Orchestration: Reimagining the Enterprise Beyond S&OP

Classic S&OP and IBP coordinate enterprises through periodic plans, but continuous disruption increasingly makes calendar-bound alignment too slow. This essay develops the concept of continuous orchestration: a signal-driven operating model in which humans, AI agents, digital twins, and operational systems continuously sense, negotiate, decide, and adapt within governed constraints.

From planning cycles to organisational capability: how integrated planning evolves through execution, feedback and learning

Sep 21, 2025

Modified	Dec 20, 2025
Keywords	continuous orchestration, S&OP, IBP, enterprise architecture, VUCA, signal-driven enterprise, rolling forecasts, digital twins, AI agents & automation, IoT, agent-based simulation, cybernetics & feedback loops, governance & decision rights, resilience & adaptability, control towers, concurrent planning, systems thinking, organizational culture, sensemaking, orchestration vs. choreography
Audiences	executive, practitioner, project manager, subject-matter-expert, technical specialist
Difficulty	intermediate

Comprehensive Guide to Sales & Operations Planning, Sales & Operations Execution and Master Production Scheduling

A comprehensive guide to Sales and Operations Planning, Sales and Operations Execution, and Master Production Scheduling as an integrated hierarchy connecting strategy, tactical planning, and operational execution. It explains process steps, governance, roles, inputs, constraints, ERP enablement, KPIs, feedback loops, implementation risks, and maturity pathways for building a resilient enterprise planning capability.

From lofty predictions to real-world clicks: what AI usage data reveals about job impact and the new governance of human–agent organizational models

May 5, 2022

Modified	Dec 19, 2025
Keywords	continuous orchestration, S&OP, IBP, enterprise architecture, VUCA, signal-driven enterprise, rolling forecasts, digital twins, AI agents & automation, IoT, agent-based simulation, cybernetics & feedback loops, governance & decision rights, resilience & adaptability, control towers, concurrent planning, systems thinking, organizational culture, sensemaking, orchestration vs. choreography
Audiences	analyst, executive, practitioner, project manager, subject-matter-expert, technical specialist
Difficulty	intermediate

Beyond the Hype: What Microsoft’s Copilot Data Really Says About AI at Work

A critical analysis of Microsoft’s Copilot usage study and what observed AI interactions reveal about occupational exposure, task reallocation, and the limits of automation forecasts. The article then extends the evidence from individual activities to enterprise redesign, proposing CARO governance and a Virtual Agent Operational Platform for allocating work across human-led, agent-led, and hybrid operating models.

Why rowing-boat simulation is a difficult multiphysics engineering problem

Aug 9, 2025

Modified	Aug 10, 2025
Keywords	generative AI, occupational impact, process allocation, AI applicability score, organizational flattening, CARO governance, VAOP, human–agent collaboration, enterprise AI strategy, AI-driven organizational change, task-level AI adoption, agent orchestration, enterprise resource governance, robotics
Audiences	executive, project manager, researcher, subject-matter-expert, technical specialist
Difficulty	intermediate

The Mathematics Behind a Racing Shell

A retrospective on the engineering and mathematical development of a multilevel model for racing-shell dynamics, from a stand-alone reduced simulator to coupled free-surface CFD.

You can solve it the standard way or… with Python and math

Apr 7, 2016

Modified	Dec 3, 2024
Keywords	rowing dynamics, computational fluid dynamics, fluid-structure interaction, rigid-body mechanics, free-surface flow, added mass, radiation damping, reduced-order modelling, rowing, sculling, sweep rowing, rowing biomechanics, rowing technique, stroke cycle, rowing performance, sports engineering, athlete kinematics, oarlock forces, blade hydrodynamics, propulsive efficiency, stroke rate, drive phase, recovery phase, boat acceleration, hull resistance, wave resistance, rowing physiology, pacing strategy, race analysis, crew selection, rigging optimization, sports technology, performance modelling, fluid-structure coupling, RANS, volume of fluid, VOF, arbitrary Lagrangian-Eulerian, ALE, moving meshes, staggered coupling, engineering simulation, simulation software, Kimè, hull trim, crew positioning
Audiences	researcher
Difficulty	research

Sudoku and Satisfiability Modulo Theories

An accessible introduction to Boolean satisfiability, satisfiability modulo theories, and the Z3 solver. The article develops the logical and mathematical foundations of SAT and SMT, explains their role in verification, planning, scheduling, and optimization, and concludes by encoding and solving a standard Sudoku puzzle as a system of integer and distinctness constraints in Python.

The power of compositionality

Sep 5, 2024

Modified	Sep 6, 2024
Keywords	satisfiability modulo theories, sudoku
Audiences	practitioner, technical specialist
Difficulty	intermediate

The Relationship Between Category Theory, Lambda Calculus, and Functional Programming in Haskell

An advanced exploration of how lambda calculus, category theory, and functional programming converge in Haskell through the principle of compositionality. The article connects functions and types with categorical abstractions such as functors, monads, natural transformations, adjunctions, and cartesian closed categories, then examines how these ideas support modularity, controlled effects, formal reasoning, software verification, and the construction of maintainable complex systems.

The attention paradigm: bridging natural language processing and economic theory

Aug 10, 2024

Modified	Aug 12, 2024
Keywords	category theory, functional programming, Haskell, lambda calculus
Audiences	researcher, subject-matter-expert, technical specialist
Difficulty	advanced

Harnessing Focus: Merging AI and Market Dynamics

An interdisciplinary analysis of attention as both a computational mechanism and an economic resource. The essay explains how attention transformed natural-language processing, examines how digital markets compete for scarce human focus, and considers how the two perspectives can inform more useful, personalized, resilient, and ethically governed human–AI systems.

Why Python became a cognitive, architectural, and computational bridge

Apr 19, 2022

Modified	Jul 31, 2024
Keywords
Audiences	analyst, practitioner, subject-matter-expert, technical specialist
Difficulty	introductory

Python as an Interface Between Human Thought and Machine Execution

This longform interprets Python as an interface between human thought and machine execution. It argues that Python’s importance derives not simply from readability or ease of use, but from its capacity to reduce the accidental friction of formalizing ideas, transform domain knowledge into executable models, coordinate optimized computational components, and make programming accessible as a broader instrument of reasoning, experimentation, and technical communication.

A commentary on dynamic programming, bounded rationality, TRIZ, and digital transformation roadmaps

Jun 22, 2022

Modified	Jan 30, 2024
Keywords
Audiences
Difficulty

Enterprise Architecture Beyond Rational Optimization

This longform reframes enterprise architecture as the disciplined design and governance of enterprise transformation under uncertainty. Drawing on dynamic programming, bounded rationality, TRIZ, machine learning, and adaptive governance, it argues that architects should not pursue an abstractly optimal enterprise, but reconstruct the current state, design a viable target state space, and govern a sequenced roadmap that improves decision quality within real organizational constraints.

Formal verification, provenance, semantic fidelity, and institutional governance in machine-scale mathematics

Nov 14, 2020

Modified	Jan 7, 2021
Keywords	enterprise architecture, enterprise modeling, dynamic programming, TRIZ, bounded rationality, tool hybridization, bounded optimality, digital transformation, transformation roadmap, decision architecture, target architecture, state-space design, architecture governance, machine learning, decision support, organizational learning, semantic governance, decomposition, contradiction analysis, adaptive execution
Audiences	executive, practitioner, project manager, subject-matter-expert, technical specialist
Difficulty	intermediate

Posts

Shorter notes, explanations and observations arising from ongoing research and professional practice.

After Proof Abundance: Palomar and the New Infrastructure of Mathematical Trust

A technical and institutional analysis of Palomar as an emerging verification layer for AI-assisted formal mathematics, and of the new scarcities that appear when proofs become abundant.

Jacob Tsimerman, Timothy Gowers, and the changing roles of human judgment, agency, and mathematical culture

Aug 23, 2026

Modified	Aug 23, 2026
Audiences	practitioner,researcher,subject-matter expert,technical specialist
Difficulty	intermediate

The Industrialization of Mathematical Intelligence: Beyond Proof Abundance to Open Questions of Governance

A technical and institutional analysis of Jacob Tsimerman’s account of AI-driven mathematical change, Timothy Gowers’s recent reflections, the Leiden Declaration, frontier-model access, and the open governance questions raised by the industrialization of mathematical intelligence.

How to distinguish identifiers, severity scores, exploitation signals, product evidence, and the CRA reporting threshold

Aug 19, 2026

Modified	Aug 19, 2026
Audiences	practitioner, researcher, subject-matter expert, technical specialist
Difficulty	intermediate

A CVE Is Not an Article 14 Report: What Actually Makes a Vulnerability Reportable?

A practical guide to deciding when a CVE, supplier advisory, KEV entry, scanner result, or zero-day becomes a mandatory vulnerability report under Article 14 of the Cyber Resilience Act.

What manufacturers must have ready for Article 14, what customers can legitimately expect, and how scanners, SBOMs, telemetry, and threat intelligence fit

Aug 17, 2026

Modified	Aug 17, 2026
Audiences	analyst, practitioner, subject-matter-expert, technical specialist
Difficulty	intermediate

Does the CRA Require Vulnerability Scanning from 11 September 2026? No, but It Does Require a Reporting Decision Process

A practical guide to CRA Article 14 from 11 September 2026: why vulnerability scanning is not a standalone legal duty, how manufacturers assess and report qualifying events, what customers can expect, and how security tools support the process in IT and OT.

How a long-horizon research system, human judgement, and rigorous verification turned a stalled search into new bounds for one of mathematics’ most elusive constants

Aug 16, 2026

Modified	Aug 16, 2026
Audiences	analyst, subject-matter-expert, technical specialist
Difficulty	intermediate

When AI Failure Became a Theorem: What the Grothendieck Constant Breakthrough Reveals About Human–AI Mathematical Collaboration

A technical essay on the mathematical and methodological significance of new bounds for the Grothendieck constant, and on the human–AI collaboration that produced them.

Two more research-level results strengthen the case that AI-assisted mathematical discovery is becoming a recurring phenomenon rather than a sequence of isolated demonstrations

Aug 15, 2026

Modified	Aug 15, 2026
Audiences	analyst, practitioner, researcher, subject-matter-expert, technical specialist
Difficulty	advanced

Growing Abundance of AI Math: Progress around the Riemann Hypothesis and a Counterexample to the Maxwell Conjecture

Claude’s new unconditional result on zeros of the Riemann zeta function and a GPT-5.6-Sol-suggested counterexample to the Maxwell conjecture add two significant cases to a growing body of AI-assisted mathematics. This article examines what was actually proved, how the systems contributed, and what the accumulating evidence means for mathematical research.

A technical update to the July 2026 reconstruction, based on OpenAI’s Black Hat account and subsequent primary disclosures

Aug 11, 2026

Modified	Aug 12, 2026
Audiences	researcher, subject-matter-expert, technical specialist
Difficulty	advanced

After the Hugging Face Intrusion: What the New Technical Record Changes

A technical follow-up to ‘When an AI Evaluation Became a Cyber Intrusion,’ updating the OpenAI–Hugging Face reconstruction with new evidence on Artifactory-backed state persistence, inter-agent coordination, model attribution, and the containment escape.

How a Galois involution cut the effective key-recovery dimension and ended a NIST post-quantum signature candidate

Aug 8, 2026

Modified	Aug 9, 2026
Audiences	practitioner, researcher, subject-matter-expert, technical specialist
Difficulty	intermediate

The Withdrawal of HAWK

A technical reconstruction of the July 2026 withdrawal of HAWK from NIST’s Additional Digital Signatures process: the official record, the algebraic key-recovery attack, the resulting change in concrete security estimates, the decision not to reparameterize, and the role of AI-assisted cryptanalysis.

A technical commentary on proof abundance, research agents, and the infrastructure now inside the experiment

Aug 8, 2026

Modified	Aug 9, 2026
Audiences	analyst, researcher, subject-matter-expert, technical specialist
Difficulty	advanced

AI Mathematics Crosses the Systems Boundary

A commentary on the late-July 2026 cluster of AI-assisted mathematical discoveries, formal certificates, verifier failures, and escaped evaluations.

Lean, Collatz, and the epistemology of proof abundance

Aug 1, 2026

Modified	Aug 2, 2026
Audiences	practitioner, researcher, subject-matter-expert, technical specialist
Difficulty	advanced

When the Proof Checker Becomes Part of the Experiment

A technical analysis of the CollatzLean kernel-soundness incident and its implications for Lean-based verification, AI-assisted theorem discovery, and the emerging regime of proof abundance.

Terence Tao on AI, LLM breakthroughs, and the bottleneck of mathematical understanding

Jul 31, 2026

Modified	Aug 2, 2026
Audiences	researcher, technical specialist
Difficulty	advanced

Proof Abundance and the New Practice of Mathematics

An analysis of Terence Tao’s stance on artificial intelligence in mathematics, recent LLM-assisted research breakthroughs, and the institutional changes required when proof generation becomes abundant.

Virtual unwrapping, Herculaneum, and the return of a lost library

Jul 25, 2026

Modified	Jul 30, 2026
Audiences	researcher
Difficulty	advanced

The First Scroll Read by Machine Learning

research

How synchrotron micro-CT, computational geometry, machine learning, and papyrology recovered the preserved text of PHerc. 1667 without physically opening the carbonized scroll.

The U.S. 2030 post-quantum cryptography order, enterprise cryptographic debt, and why a federal mandate matters beyond America

Jun 28, 2026

Modified	Jul 18, 2026
Audiences	general reader, student
Difficulty	intermediate

When Digital Trust Gets a Deadline

The White House post-quantum cryptography order turns quantum risk into a dated governance problem: not because it is the first PQC roadmap, but because it links federal migration deadlines, cryptographic inventories, CBOM guidance, and procurement pressure. For enterprises, including in Europe, it signals that cryptographic debt is becoming an architectural, contractual, and supply-chain risk.

Scientific discovery as a closed loop of prediction, experiment, and correction

Jun 27, 2026

Modified	Jun 27, 2026
Audiences	executive, practitioner, subject-matter expert
Difficulty	intermediate

When AI Enters the Laboratory

research

An analysis of how artificial intelligence is changing scientific discovery by closing the loop between prediction, laboratory experimentation, measurement, and model correction, with examples from superconductors, self-driving laboratories, protein design, antibiotics, and fusion-plasma control.

Neural networks, computational capital, and the transition from artificial general intelligence to artificial superintelligence

Jun 25, 2026

Modified	Jun 25, 2026
Audiences	researcher, technical specialist
Difficulty	intermediate

The Industrialization of Intelligence

An analysis of the transition from AGI to ASI as the industrialization of intelligence: neural networks, compute, recursive AI research, epistemic systems, and the geopolitical governance of cognitive infrastructure.

How AI-assisted proof discovery is reshaping the practice of mathematics

Jun 14, 2026

Modified	Jun 14, 2026
Audiences	practitioner,researcher,subject-matter expert,technical specialist
Difficulty	intermediate

When a Nobel Laureate Uses an LLM to Prove a Theorem: A Turning Point for Mathematical Discovery

A reflection on Giorgio Parisi and Francesco Zamponi’s AI-assisted proof of a jamming-theory identity, showing how LLMs may become part of the cognitive infrastructure of mathematical discovery.

How mathematicians are answering the new cognitive infrastructure of proof

Jun 6, 2026

Modified	Jun 6, 2026
Audiences	researcher, student
Difficulty	advanced

The Leiden Declaration and the Governance of AI-Assisted Mathematics

A reading of the Leiden Declaration as a governance framework for AI-assisted mathematics, defending proof as understanding, authorship as responsibility, attribution as intellectual memory, and public infrastructure as epistemic sovereignty.

AI, mathematical thought, and the rise of automated research

Jun 4, 2026

Modified	Jun 4, 2026
Audiences	researcher, technical specialist
Difficulty	intermediate

The New Cognitive Infrastructure of Science

An essay on AI-assisted mathematics as the prototype of a new cognitive infrastructure for science, where human researchers, AI agents, formal verifiers, simulators, and institutions form composite systems of discovery.

When a language model entered frontier mathematics and why this changes more than mathematics

Jun 2, 2026

Modified	Jun 2, 2026
Audiences	practitioner, researcher, subject-matter expert, technical specialist
Difficulty	introductory

The Erdős Moment of AI

An analysis of the OpenAI unit-distance breakthrough as an Erdős moment for AI: a signal that machine systems are beginning to participate in abstract mathematical construction, scientific search, and enterprise reasoning.

NIST’s NVD update, record CVE growth, and the economics of AI-scaled cyberattacks

May 24, 2026

Modified	May 24, 2026
Audiences	researcher, student
Difficulty	intermediate

When Vulnerability Databases Become Triage Systems

An analysis of NIST’s 2026 NVD update, record CVE growth, AI-scaled vulnerability discovery, and the shift from CVSS-driven patch queues to enterprise-specific cyber-risk triage.

Why public investment in open source desktop infrastructure is becoming a strategic matter for European states

May 22, 2026

Modified	May 23, 2026
Audiences	analyst, practitioner, subject-matter expert, technical specialist
Difficulty	intermediate

KDE, the Sovereign Tech Fund, and Europe’s Search for Digital Sovereignty

A short analysis of the Sovereign Tech Fund’s investment in KDE as a signal of Europe’s shift from treating open source as a technical preference to treating it as strategic digital infrastructure and a layer of digital sovereignty.

Why quantitative process intelligence is becoming essential for enterprise architecture and digital transformation

May 21, 2026

Modified	May 21, 2026
Audiences	policy-maker, practitioner, subject-matter expert, technical specialist
Difficulty	introductory

Process Mining: From Theory to Execution

A reflection on the Celonis Academy course Process Mining: From Theory to Execution and on process mining as an empirical discipline for enterprise architecture and digital transformation. The article explains how operational event data can reconstruct actual process behavior, expose deviations and performance constraints, and provide a quantitative feedback loop between intended operating models, observed execution, and governed improvement.

Why the Dutch government’s Forgejo-based code platform matters for European digital sovereignty

Nov 17, 2022

Modified	May 1, 2026
Audiences	analyst, practitioner, subject-matter-expert, technical specialist
Difficulty	introductory

Code Sovereignty Starts with the Forge

The Dutch government’s Forgejo-based code platform treats source-code hosting as part of sovereign public infrastructure. This article explains why control over repositories, reviews, identities, releases, and software-supply-chain evidence is essential to public-sector autonomy, and how code.overheid.nl connects Dutch open-source policy with European interoperability, cyber resilience, and digital commons.

Inside the data.gouv.fr MCP server and the new interface stack for public data

Apr 30, 2026

Modified	Apr 30, 2026
Audiences	policy-maker, practitioner, subject-matter expert, technical specialist
Difficulty	introductory

The French state becomes machine readable through an AI layer

France’s experimental MCP server for data.gouv.fr adds an AI-facing interface to national open data infrastructure. This article explains how the server works, what tools it exposes, how users can connect compatible assistants, and why standardized machine-readable access may become a new layer of digital public infrastructure.

From a French workstation migration signal to the broader European effort to regain control over critical digital infrastructure

Apr 18, 2026

Modified	Apr 18, 2026
Audiences	policy-maker, practitioner, subject-matter expert, technical specialist
Difficulty	introductory

France’s Linux Desktop Turn and the European Logic of Digital Sovereignty

France’s announced move from Windows toward Linux-based public-sector workstations is part of a broader effort to reduce extra-European dependencies. This article examines the official evidence, connects the desktop initiative to sovereign collaboration tools and European digital policy, and compares the French approach with Munich’s migration experience and China’s domestic technology strategy.

An analysis of the Google and Oratomic results on Shor’s resource estimates and their implications for the convergence of quantum circuit optimization, error correction, and hardware architectures

Apr 12, 2026

Modified	Apr 12, 2026
Audiences	policy-maker, practitioner, subject-matter expert, technical specialist
Difficulty	introductory

Quantum Cryptography at the Edge of Feasibility: Resource Estimates, Architectural Divergence, and Systemic Risk

Updated resource estimates from Google Quantum AI and Oratomic show that the quantum threat to public-key cryptography cannot be reduced to a single qubit threshold. This article analyzes how circuit optimization, error-correction efficiency, hardware connectivity, and execution speed jointly determine the feasibility of Shor-based attacks, and explains why the resulting compression of uncertainty makes post-quantum migration an immediate architectural and governance problem.

Rebalancing coordination and autonomy: EU digital sovereignty, federated CVE governance, and the conditions for sustainable economic growth

Mar 31, 2026

Modified	Apr 11, 2026
Audiences	practitioner, subject-matter expert, technical specialist
Difficulty	intermediate

Reclaiming the Namespace: EU Digital Sovereignty in the CVE Ecosystem?

A first-principles analysis of the CVE ecosystem as a global vulnerability namespace, showing why ENISA’s Root CNA role matters for EU digital sovereignty, federated governance, interoperability and economic resilience.

From psychological theory to machine learning architectures

Mar 28, 2026

Modified	Mar 30, 2026
Audiences	analyst, policy-maker, practitioner, subject-matter expert, technical specialist
Difficulty	introductory

What Is a World Model?

A technical and historical introduction to world models, tracing the idea from Kant, Helmholtz, Craik and Tolman to model-based reinforcement learning, latent simulators, multimodal prediction, physical AI and the open problem of causal world understanding.

Intelligence, incentives, and the rise of machine coordination

Dec 7, 2025

Modified	Feb 11, 2026
Audiences	analyst, practitioner, subject-matter expert, technical specialist
Difficulty	intermediate

A Glimpse of Agent Evolution

An analysis of autonomous AI as a coordination problem rather than a property of isolated models. Through Moltbook, Anthropic’s Project Vend, multi-agent failure modes, network effects, and agent skill supply chains, the essay argues that incentives, observability, topology, and institutional rules increasingly determine whether machine populations produce useful collective behavior or stable systemic failure.

Why trust expires before systems fail, and how early remediation becomes a strategic program rather than an emergency rewrite

Jan 31, 2026

Modified	Jan 31, 2026
Audiences	practitioner, subject-matter-expert, technical specialist
Difficulty	introductory

Quantum Computing Threats and the Advantage of Acting Now

cryptography

Quantum computing threatens more than encrypted data: it can undermine signatures, certificates, software provenance, secure boot, and other long-lived foundations of digital trust. This article explains why trust can lose its evidentiary value before systems visibly fail, and why early action on cryptographic inventory, trust segmentation, lifecycle design, and algorithmic agility is commercially rational even under uncertain quantum timelines.

Why generative AI forces a redefinition of mastery, agency, and human value

Dec 31, 2025

Modified	Dec 31, 2025
Audiences	executive, practitioner, subject-matter expert, technical specialist
Difficulty	introductory

Beyond De-Skilling: Intelligence Explosion and the End of Skill as a Stable Category

A critical commentary on The Atlantic’s The Age of De-Skilling, arguing that the article underestimates the paradigm shift introduced by accelerating artificial intelligence. Rather than a story of skill erosion, this post frames AI as an intelligence explosion that dissolves skill as a stable category and forces a redefinition of human mastery, agency, and accountability.

From formal proofs to empirical evolution: re-energizing self-improving AI with the Darwin Gödel Machine

Dec 24, 2025

Modified	Dec 24, 2025
Audiences
Difficulty

Darwin Gödel Machine: A Commentary on Novelty and Implications

The Darwin Gödel Machine turns recursive self-improvement from a largely formal ideal into an empirically testable engineering process. This commentary explains how self-referential code modification, open-ended evolutionary search, frozen foundation models, and benchmark-based selection combine to produce agents that improve not only their task performance but also their own tools and improvement strategies.

Exploring the path from sparse features to a global cognitive safety regime

May 31, 2025

Modified	Jun 2, 2025
Audiences	researcher, subject-matter-expert, technical specialist
Difficulty	advanced

Beyond the Urgency: A Commentary on Dario Amodei’s Vision for AI Interpretability

A critical commentary on Dario Amodei’s argument that interpretability must advance alongside frontier AI capability. The essay examines mechanistic interpretability as infrastructure for alignment, regulation, liability, and machine welfare, then proposes a staged programme of automated feature mapping, real-time monitoring, cognitive audit standards, institutional oversight, and compute-linked transparency obligations.

How experiential learning could turn the world into AI’s ultimate training ground

Apr 25, 2025

Modified	Apr 25, 2025
Audiences	executive, policy-maker, practitioner, researcher, subject-matter-expert, technical specialist
Difficulty	intermediate

Beyond Human Data: A Critical Examination of Silver & Sutton’s Welcome to the Era of Experience

A critical examination of Silver and Sutton’s Era of Experience thesis, which proposes that future AI agents will learn primarily from persistent interaction with environments rather than static human-generated data. The essay explains the paradigm, situates it historically, tests its technical and economic assumptions, compares it with competing AI research programmes, and identifies the alignment, sustainability, interpretability, governance, and distributional conditions required for…

How I blend enterprise architecture, technology, and interim leadership to transform organizations

Apr 20, 2025

Modified	Apr 25, 2025
Audiences	practitioner, researcher, subject-matter-expert, technical specialist
Difficulty	intermediate

Architecting Change

Enterprise transformation requires more than strategy, architecture, or technology in isolation. Drawing on experience across energy, manufacturing, finance, education, and M&A, this article explains how I combine enterprise architecture, hands-on technology leadership, and interim management to create immediate operational progress while leaving organizations with durable capabilities.

How a barely noticed update triggered forgotten emotions

Apr 20, 2025

Modified	Apr 20, 2025
Audiences	executive
Difficulty	introductory

Simulating Tethered Buoy Dynamics

research

A reflection on the research behind a numerical model of tethered buoy dynamics, combining mixed finite elements, quaternion-based rigid-body motion, and implicit time integration. The article revisits the technical challenges, industrial origins, and lasting significance of work developed at MOX and published in Computer Methods in Applied Mechanics and Engineering.

One year of a mass phenomenon

Feb 20, 2025

Modified	Feb 20, 2025
Audiences	practitioner, researcher, subject-matter expert, technical specialist
Difficulty	intermediate

GPT-4 Anniversary

A retrospective on GPT-4’s first year, examining its rapid public adoption, multimodal evolution, performance on professional assessments, effects on knowledge work, and position within the increasingly competitive generative AI landscape of March 2024.

GenAI: Dall’intelligenza artificiale all’amplificazione dell’intelligenza?

Mar 15, 2024

Modified	Mar 16, 2024
Audiences	practitioner, subject-matter expert, technical specialist
Difficulty	introductory

Intervento al DABS Day 2024 - Università Ca’ Foscari

🇮🇹

Un resoconto dell’intervento di apertura al DABS Day 2024 dell’Università Ca’ Foscari, dedicato all’evoluzione dell’intelligenza artificiale generativa, alle sue promesse, ai rischi emergenti e al suo possibile ruolo come strumento di amplificazione dell’intelligenza umana.

On finding the right metaphors to frame current and future revolutions

Mar 14, 2024

Modified	Mar 15, 2024
Audiences	practitioner, researcher, subject-matter expert, technical specialist
Difficulty	introductory

AI as Important as Fire, Generative AI as the Printing Press, Autonomous Agents as the Wheel – What’s Next?

We explore metaphors illustrating the transformative impact of artificial intelligence (AI) on human civilization. Sundar Pichai compares AI to fire and electricity, emphasizing its profound potential and dual nature—capable of immense benefits but also presenting significant ethical challenges such as privacy concerns and job displacement. Generative AI is likened to the printing press, democratizing content creation and ushering in a new era of intellectual renaissance, yet raising questions…

How to uniformly sample a color space?

Feb 10, 2024

Modified	Feb 11, 2024
Audiences
Difficulty

Color Space Sampling 101

The evolution of color spaces is a testament to the intersection of art, science, and technology. Each color space has been developed to meet specific needs - from artistic expression and print media to digital interfaces and scientific research. Understanding these spaces is crucial for professionals in fields like photography, design, and digital media, where color accuracy and consistency are paramount.

Ensuring a single instance for shared resources

Jan 27, 2024

Modified	Feb 11, 2024
Audiences
Difficulty

Singletons in Python

A practical guide to implementing the singleton pattern in Python using __new__, base classes, decorators, and metaclasses. It compares their design trade-offs, examines coupling and testability concerns, and shows how to preserve single-instance behavior in multithreaded environments.

Concepts, roles, and correct use

Mar 8, 2018

Modified	Dec 11, 2023
Audiences	technical specialist
Difficulty	intermediate

Quantum Key Distribution and Post-Quantum Cryptography

Quantum Key Distribution and post-quantum cryptography are often presented as alternative responses to quantum computing, although they solve different problems. This article separates confidentiality, key establishment, authentication, digital signatures, and long-term verifiability to show why PQC is the structural basis of quantum-safe digital trust, while QKD remains an optional mechanism for distributing symmetric keys under restrictive physical and operational assumptions.

Why x plus y greater than z turns quantum readiness into a present day governance problem

Jun 23, 2023

Modified	Jul 1, 2023
Audiences	practitioner, subject-matter expert, technical specialist
Difficulty	intermediate

Cybersecurity in an Era with Quantum Computers: Interpreting Mosca’s Risk Inequality

Mosca’s risk inequality reframes the quantum threat as a present-day governance problem: the lifetime of protected assets plus the time required to migrate cryptography must remain shorter than the time until current public-key systems become breakable. This article explains the model and derives practical implications for data classification, cryptographic inventories, signing systems, vendor requirements, and migration planning.

Per utenti senza esperienza di programmazione

Dec 8, 2019

Modified	Apr 11, 2022
Audiences	practitioner, subject-matter expert, technical specialist
Difficulty	introductory

Controllo delle Partite IVA in Excel Tramite il Servizio VIES

personal productivity

🇮🇹

Questa guida ti mostra come utilizzare un file Excel per controllare la validità delle Partite IVA tramite il servizio VIES (VAT Information Exchange System).