Writing from practice.

Three techniques for detecting whether an LLM's output distribution has shifted: embedding space drift, token-level distribution analysis, and semantic entropy. Includes concrete examples, interpretation guidance, and the diagnostic patterns that connect signals to root causes.

A practitioner's guide to investigating AI and LLM system failures. Covers telemetry readiness, hallucination forensics, RAG failure analysis, and structuring findings for legal and regulatory scrutiny.

A comprehensive guide to delivering effective cybersecurity assessments, covering document review, questionnaires, interviews, and presentation techniques.