When an SBOM becomes operationally useful: lessons from Eclipse Kura
Supply chain security has become a critical topic in the security world in recent years, and while SBOMs are a...
Why ecosystem-specific trust frameworks don’t scale across data spaces
As long as an organisation participates in a single data space, ecosystem-specific trust frameworks work reasonably well: rules are defined...
When a DSL is worth the cost: Lessons from quantum computing
Domain-specific languages (DSLs) often divide engineering teams. When they work, they make complex systems easier to reason about. When they...
Enterprise Java Persistence beyond the JPA mindset
For a long time, enterprise Java persistence has been approached as a largely stable area of the stack. Entities, an...
Generating an SBOM is not enough for Java teams
Many Java teams already generate Software Bills of Materials (SBOMs). In isolation, that is not particularly difficult. What is more...
IoT architecture at scale: why device-centric design no longer works
IoT systems rarely fail because of hardware constraints. They fail because we continue to design them as collections of isolated...
From tested to "trustable": Rethinking software assurance at OCX 2026
In the past year, several high-profile outages disrupted airports, cloud platforms, and critical digital services worldwide. In each case, the...
Beyond compliance: what the Cyber Resilience Act means for software trust
As the Cyber Resilience Act (CRA) moves closer to enforcement, engineering teams across Europe are being asked to demonstrate secure...