Tracing privilege changes before the freeze
A walkthrough for catching grants that land between releases and never appear in the weekly digest.
Blog
Field notes for quieter control cycles
Practical essays from instructors and alumni — not recycled compliance slogans.
Retention windows that Hong Kong teams actually calendar
How ops and audit align deletion schedules without treating every table like a vault forever.
Sampling financial tables without theatrical precision
Stratify, document, and stop pretending a single random draw proves a ledger.
When audit logs look complete and still mislead
Gaps that slip past a financial auditing app when privileged paths never emit events.