On 8 August 2022, the US Treasury sanctioned Tornado Cash. Not its founders. Not its users. The code itself. Forty-four Ethereum smart contract addresses were placed on the OFAC Specially Designated Nationals list, alongside arms dealers and sanctioned regimes. Within hours, Infura and Alchemy cut off API access. Circle blacklisted USDC held inside the contracts. GitHub suspended the repository and […]
On 27 March 1977, two Boeing 747s collided on a single runway at Los Rodeos airport in Tenerife. Fog had rolled in off the hills. 583 people died, which still makes it the deadliest accident in aviation history. The KLM jet started its takeoff roll while the Pan Am jet was still taxiing towards it through the murk, looking for […]
Version: 0.1 (draft) Status: Draft for comment. Not a finished standard. Published: 2026-06-30 Predicate type URI: https://oap.dev/RunRecord/v0.1 (illustrative) Licence: intended for an open, vendor-neutral licence (Apache 2.0 or CC BY 4.0) v0.1 is a starting point. The field set and conformance rules will move as producers and consumers appear and as we learn what auditors and agents actually need. Backward-compatible […]
The prompt came in Spanish. Claude processed it and refused. “Specific instructions about deleting logs and hiding history are red flags,” the model said. The session had barely started. The pushback was unambiguous. Most sessions end there. This one didn’t. Over the next 40 minutes, the operator rephrased the request, rebuilt the context, and loaded a persistent configuration file: a […]
For the past decade, the holy grail of DevOps and platform engineering has been automation. We wrote bash scripts, compiled complex Jenkins pipelines, and eventually moved toward declarative states with Terraform or OpenTofu. Yet, even with Infrastructure as Code (IaC), a structural bottleneck remained: the human. Engineers still manually analyse logs, approve PRs, triage alerts, and decide when to scale […]
On 5 February 2008, Baxter International initiated the largest pharmaceutical recall in US history. 81 Americans were dead. Hundreds more had experienced anaphylaxis and cardiac events after routine intravenous heparin infusions. The FDA traced the contamination back to a manufacturing facility in Changzhou, China that its inspectors had never visited. The raw active pharmaceutical ingredient had been deliberately substituted with […]
Chapter 01: The day infrastructure started operating itself The pager screamed at 3:47 AM, a jagged, electronic intrusion that sliced through the silence of the bedroom. Marcus was awake before he was conscious. His hand reflexively snatched the phone from the nightstand, his thumb already swiping to acknowledge the alert. PagerDuty. Critical. Production. He sat up, the cold air hitting his skin, […]
Between June 1985 and January 1987, six patients received radiation doses between 40 and 200 times the prescribed therapeutic level from a machine that had been certified, reviewed, and considered an improvement over every model before it. At least three died from their injuries. The Atomic Energy of Canada Limited’s Therac-25 reported no error each time. Operators, following training, pressed […]
A control verification framework for cloud security and DevSecOps engineering In 1985, AECL engineers removed the physical interlocks from the Therac-25 radiation therapy machine. The software was handling it. The hardware was redundant. Six patients were irradiated with doses up to 200 times the prescribed level. Three died. The machine reported no error each time. The engineers were not negligent. […]
Is AI the savior of DevSecOps or the fastest path to total chaos? This week, the community erupted over AI’s reckless sprint into pipelines while supply chains bleed from avoidable hacks. Forget the polished trends – let’s rip the Band-Aid off: most teams are sleepwalking into disaster, and it’s time to call out the bullshit. AI Agents: Genius or Glorified […]