July 2026
July: Observation-mode SCA, a single-source audit plan, and capture that actually matches the session
Three threads from the month. Parameterizing a Black Duck reusable workflow so observation does not block CI, collapsing a SOC 2 vulnerability plan onto Jira as the only living source, and a QA capture spike that taught us video is the evidence when HAR is silent.