unicolet.org

The irony is not lost on me of how, just when the cost of code collapsed, EU-CRA is coming into effect.

 🏎️ (Another) Great piece by Luca Rossi  on AI, this time about AI governance. At the beginning Luca mentions brakes, which immediately reminds of a great quote I got from Matthew Skelton : why do cars have brakes? to go faster! Almost counterintuitive at first, but when you think about it, cars can only go as fast as their stopping power allows. It's a balance, really. High performing teams know it, that to go fast you need more "brakes": linters, sast, coding guidelines, reviews, documentation, tests of all kinds and assorted automation. Beautiful piece, highly recommended: https://refactoring.fm/p/getting-started-with-ai-governance

 More proof that we're stuck in the past: https://www.reddit.com/r/embedded/comments/1s1agqo/why_is_bom_management_still_stuck_in_excel_in_2026/ every hardware team I’ve worked with ends up with the same setup… some giant excel or google sheet for the BOM everyone complains about it, but no one really replaces it you get random versions, people overwriting stuff, no idea who changed what, etc but at the same time whenever I look at “proper” tools they feel heavy or just not worth the switch so yeah genuinely curious, what are you all actually using day to day? My latest talk about Continuous Compliance is about moving on from xls (to lower cognitive load): https://www.incontrodevops.it/talk/continuous-compliance/

Thoughtworks just published volume 33 of their Technology Radar . I found some interesting gems in it that I thought were worthwhile re-sharing: LiteLLM : I've been playing around with it to share AWS Bedrock models over a local, OpenAI-compatible API and I am impressed with the breadth of features (for example budgeting). The AI ecosystem is vibrant and flourishing. Continuous Compliance : so happy to see this mentioned! Personally I would expand the term to include other compliance tools like Vanta and I am convinced that this kind of automation and software will be essential for organizations to scale while meeting increasing regulatory demands. AGENTS.md : as someone who reads Simon's Willison blog, this is no surprise and a welcome confirmation (another file to watch out for:  CLAUDE.md ). Oxide : I wrote this post almost exclusively to mention Oxide 😅, a company I admire. Whenever people ask me about my cloud exit strategy, my answer is: Oxide. Here's why .