https://bluesquadron.dev/posts/Recent content in Writing on BlueSquadron — Security engineering for AI systemsHugo -- gohugo.ioen-usflorent.batard@gmail.com (Florent Batard)florent.batard@gmail.com (Florent Batard)Mon, 31 Aug 2026 00:00:00 +0000https://bluesquadron.dev/posts/securing-the-ai-driven-development-lifecycle/Mon, 31 Aug 2026 00:00:00 +0000florent.batard@gmail.com (Florent Batard)https://bluesquadron.dev/posts/securing-the-ai-driven-development-lifecycle/AI-DLC gives you the strongest process integrity I have seen in any methodology — approval gates, audit shards, element-level traceability. None of it tells you the code is safe. Those are different claims, and closing the gap phase by phase is the work.https://bluesquadron.dev/posts/security-coach-for-ai-agents/Tue, 25 Aug 2026 00:00:00 +0000florent.batard@gmail.com (Florent Batard)https://bluesquadron.dev/posts/security-coach-for-ai-agents/Every team debating whether to trust the model has already made the decision that matters: where the boundary lives. A prompt is a promise. A tool interface is a constraint. Four patterns for telling them apart.https://bluesquadron.dev/posts/sitadel-what-you-owe-your-users/Tue, 18 Aug 2026 00:00:00 +0000florent.batard@gmail.com (Florent Batard)https://bluesquadron.dev/posts/sitadel-what-you-owe-your-users/Eight years, 179 commits, and packaged in Kali and BlackArch — which I did not plan and which changed what I am allowed to break. On finding quality over detection coverage, a hang that only existed in a real terminal, and the cleanup nobody asks for.https://bluesquadron.dev/posts/watari-a-control-that-was-never-on/Tue, 11 Aug 2026 00:00:00 +0000florent.batard@gmail.com (Florent Batard)https://bluesquadron.dev/posts/watari-a-control-that-was-never-on/Watari’s headline claim is tenant isolation enforced by PostgreSQL Row-Level Security. The policies had been in the schema for months and had never once taken effect. Turning them on took four changes that had to land together — and none of them was writing a policy.https://bluesquadron.dev/posts/secrust-when-adding-cores-made-it-slower/Tue, 04 Aug 2026 00:00:00 +0000florent.batard@gmail.com (Florent Batard)https://bluesquadron.dev/posts/secrust-when-adding-cores-made-it-slower/A single-process Sigma correlation engine in Rust. Eight optimisation passes took the realistic workload up 301% — and then four threads made it 23% slower than two. Why that happened, what I shipped as the default, and the things I decided not to build.https://bluesquadron.dev/posts/agent-driven-security-operations/Wed, 08 Jul 2026 00:00:00 +0000florent.batard@gmail.com (Florent Batard)https://bluesquadron.dev/posts/agent-driven-security-operations/Tuning detections until the volume fits your headcount means choosing your visibility based on your staffing. The fix is not more analysts — it is separating the three layers of triage by what each one is allowed to be wrong about.https://bluesquadron.dev/posts/designing-security-into-the-ai-development-lifecycle/Tue, 16 Jun 2026 00:00:00 +0000florent.batard@gmail.com (Florent Batard)https://bluesquadron.dev/posts/designing-security-into-the-ai-development-lifecycle/Not every deferred decision is an option. Some are debt whose strike price rises with the calendar — and security spends most of its budget servicing that debt rather than doing security.