DevSecOps

Working Backwards from Error Logs: Reverse Engineering the Tableau-to-Fabric OAuth Breakdown

🛑 The Crime Scene: A Misleading Desktop Failure When modern lakehouse architectures meet desktop analytics clients, authentication breakdowns rarely announce their true root cause. Instead, engineers are handed generic hex codes and deceptive UI prompts. During an enterprise deployment of Microsoft Fabric Warehouse, data analysts attempted to connect Tableau Desktop (2024.2.0) to the Fabric SQL/TDS endpoint (*.datawarehouse.fabric.microsoft.com) using the native Azure SQL Database connector and Microsoft Entra ID modern authentication. ...

Hands-On AI Security: Policy-as-Code with Open Policy Agent and Rego

How to move beyond static regex filters by using Open Policy Agent (OPA) and Rego to enforce declarative, explainable security policies on AI prompts.

Acuity Health: Part 4 — CI/CD Quality Gates & ISO 27001 Risk

Implement automated SAST, SCA, and DAST pipeline quality gates and operationalize the 10-step ISO 27001:2013 risk assessment methodology for cloud architectures.

Hands-On AI Security: Blue Teaming and Building the Security Gateway

How to decouple AI defense from the model by building a Python Flask security proxy with hot-reloading ingress filters and egress data masking.

Acuity Health: Part 2 — Zero Trust DevSecOps & NIST SSDF

How to build an isolated, Zero Trust development architecture using ephemeral runners, proxy-scanned package caches, and NIST SP 800-218 practices without slowing engineering velocity.

Hands-On AI Security: Building a Zero-Cost Local LLM Lab with Docker, Ollama, and Piper

How to build a 100% free, local AI security sandbox using Docker Desktop, Ollama (llama3.2), and a custom vulnerable chatbot to test prompt injection defenses without cloud API costs.

Acuity Health Enterprise Security Architecture: Hotwash Synthesis

The definitive synthesis and lessons-learned hotwash uniting enterprise architecture, DevSecOps, active defense, forensics, CTI, and governance into a master healthcare security blueprint.

Designing a Secure Software Development Program: Acuity Health AppSec Framework

An engineering framework operationalizing NIST SP 800-218 (SSDF), CI/CD quality gates, and OWASP API security defenses in a healthcare delivery organization.