Reflections from the people who build.
Notes on method, data and operations, with lessons from building custom software for demanding operations.
Pick a topic and start reading: method, data, security and opportunities for the people who run the operation.
The message is on the phone, not on the path
The Vorcaro case revived a technical question: if a conversation went through WhatsApp, why cannot the company simply hand over its content? The answer involves end-to-end encryption, Diffie-Hellman and the traces left on devices.
Code became cheap. Now what?
Vibe coding reduces the cost of turning intent into code. Value still depends on understanding the problem, designing the system and making it work inside a real operation.
Digitizing is not modernizing: the challenge of operational transformation in construction
Buying systems does not fix a process nobody understands. In construction, operational transformation starts with flow, constraints and the decisions technology needs to support.
AI agents in production: autonomy without control becomes risk
When AI stops only answering and starts taking action inside real systems, prompts are not enough. Production agents need policies, permissions, human approval, audit trails and observability.
Your system was built with AI. But did anyone test its security?
AI accelerated software creation, but working does not mean ready. Systems built with agents, prompts and automation need review, tests, pentesting, governance and evidence before production.
Cybersecurity does not start in the pentest. It starts in the process.
Pentesting still matters, but it cannot be the first control. With AI generating code, using tools and expanding the attack surface, security must enter the process from the start.
A delayed project is not destiny. It is lack of visibility
Engineering projects rarely become late all at once. Before deadlines slip, signals appear in the flow: blockers, pending approvals, high WIP and decisions without traceability.
AI agents and security: why governance matters
AI does not break into systems because it wants to. Risk appears when agents receive objectives, tools and broad permissions in environments without containment, auditing and governance.
How to implement KPIs, OKRs and build data-driven management
Implementing indicators does not start with a dashboard. It starts with management questions, reliable data, well-defined KPIs and OKRs connected to decision routines.
Custom infrastructure is not a luxury. It is engineering economics
Custom infrastructure does not mean spending more. It means sizing cloud, database, cache, queues, backup and monitoring around the operation's real usage.
Open innovation calls: when the right problem meets the right solution
Brazil is living a spring of open innovation calls, with record funding. The good news is that the door does not open by company size, but by organization. Here are the numbers and how to arrive prepared.
Why Mapping the Process Comes Before Implementing a Solution
Most improvement initiatives fail because they try to organize a process that was already the problem. That is why the Arxon Protocol changes the conventional order.

