Insights Hub

Field-tested writing on infrastructure that has to actually work.

Engineering blog, perspectives, whitepapers, and case studies -- all in one place.

What we are seeing across 50+ utility and industrial sites: the segmentation gap, the patch problem, and what is actually working.

Agentic ops, copilot-driven runbooks, and where automated reasoning actually pays off in the NOC.

Golden paths, IDPs, and Terraform-as-product without pretending it solves problems it does not.

Vendor pitches versus reality on the plant floor. What changes when you are CIP-regulated and a control-system vendor still ships SHA1.

860 nodes synced across SolarWinds, Tenable, Splunk through a NetBox-led enrichment pipeline.

Ansible install-mode rollout with auto-abort safety net across a regulated network.

Weekly automated evidence collection that holds up under regulator review.

Fleet-wide SNMPv2c to SNMPv3 migration with version-aware credential mapping.

Auto-abort timer, install_commit invoke_shell, U vs C state, and more.

Setting ca-cert now auto-enables server-identity-check. Two-line fix.

Import both the secret and the version resource. Do not trust ignore_secret_changes alone.