https://bluesquadron.dev/tags/policy-as-code/Recent content in Policy as Code on BlueSquadron — Security engineering for AI systemsHugo -- gohugo.ioen-usflorent.batard@gmail.com (Florent Batard)florent.batard@gmail.com (Florent Batard)Tue, 13 Oct 2026 00:00:00 +0000https://bluesquadron.dev/posts/writing-security-invariants-got-easy-keeping-them-true-didnt/Tue, 13 Oct 2026 00:00:00 +0000florent.batard@gmail.com (Florent Batard)https://bluesquadron.dev/posts/writing-security-invariants-got-easy-keeping-them-true-didnt/In 2022, the first candidate on Alex Smolen’s list of security invariants was ‘all software services use single sign-on’. Four years on, a model can write that check in seconds. What it takes to keep it true — an engine, a seed of three files, and an honest place for exceptions — is the part worth designing.