Cyber Resilience Act

27.07 2026
№ 81

AI AI Agents Software Development Compliance CRA Open Source

The Floor Below

Around the third month of using an agent, someone says the model has got worse. Almost always it isn't the model: it's the scaffolding, which came apart without throwing an exception. What degrades quietly is exactly what nobody is required to check, and in Europe, from September, that friction costs a non-conformity.

9′ reading time

1,816 words

Read →

17.07 2026
№ 79

CRA Compliance ENISA SME Software Development EU Regulation

A Score Is Not Proof of Conformity

An Advanced rating measures an organisation’s maturity. It does not show that a specific product conforms to the CRA. The distinction is not self-assessment versus outside scrutiny. It is diagnosis versus a declaration that carries responsibility.

10′ reading time

2,118 words

Read →

04.07 2026
№ 77

Compliance AI Act CRA PLD EU Regulation Software Development SME

Compliance Doesn't Fail for Lack of Rules, It Fails for Lack of Inventory

Five European regulations, written by different hands for different sectors, are converging on the same demand: prove you know what you have in the house. Whoever can't answer isn't non-compliant, they're ungovernable. And the inventory that's needed isn't compiled: it's generated.

7′ reading time

1,416 words

Read →

24.06 2026
№ 75

Digital Sovereignty Open Source Supply Chain Cybersecurity EU Regulation CRA Compliance

Sovereignty Doesn't Live in the Data Center

On the Cloud and AI Development Act, on the ten thousand repositories dressed up as honest projects, and on the distance between being inspectable and actually being inspected.

13′ reading time

2,976 words

Read →

01.05 2026
№ 63

Compliance PLD AI Act CRA EU Regulation

The Contract's Deception

On why the software supply contract, as we have known it, has stopped being the central instrument of the relationship between vendor and client — and how much it costs to keep pretending it still is.

19′ reading time

4.180 words

Read →

27.04 2026
№ 59

Compliance EU Regulation AI Act CRA Philosophy OF Technology Architecture Strategy

The Shape of Constraint

Treating regulatory compliance as the adversary of the technical project means you haven't understood what the technical project is. An essay on the category error weakening Europe's software industry — and on how the European framework, read as a system rather than as a list, configures a structural competitive advantage for those who learn to inhabit it.

16′ reading time

3.842 words

Read →