blog
Writing
Engineering notes and policy analysis. We would rather publish one honest post about a detector’s failure modes than a monthly roundup of other people’s news.
Posts are not published yet. Planned first pieces, subject to change:
Why Luhn matters more than the regex
Pattern matching finds candidate card numbers. Validation is what keeps a sanitizer from redacting every order ID in your support queue and destroying the analysts' trust in it.
Token scope is a privacy decision, not a config value
Globally stable tokens make your warehouse useful and your correlation surface larger. The trade-off deserves an explicit owner.
What pseudonymisation does and does not do under GDPR
It is a recognised safeguard under Art. 32. It is not an exit from scope, and vendors who imply otherwise create liability for their customers.
Publication schedule and author bylines [CONFIRM]