Building a Verification-of-Payee Routing and Verification Mechanism Connection
Meeting the euro-area Verification of Payee obligation means connecting to a routing and verification mechanism, not integrating with every bank. Here is the build.
Pillar: Pillar 04 - Dependency Mapping
Pillar 04 · See
Implementing Agent-to-Agent (A2A): Task Cards, Capabilities and Handoffs
A minimal, secure A2A implementation: agent cards that advertise capabilities, the task lifecycle and handoff between agents, and where to put the trust boundary so a remote agent cannot exceed its remit.
ESAP for Collection Bodies: How OAMs and NCAs Feed the Single Access Point
Officially appointed mechanisms and national competent authorities become ESAP collection bodies. The ingestion, validation and forwarding pipeline is the hidden build behind the portal, and it is not a pass-through.
Automating SBOM Generation for the CRA: From CI Artefact to Machine-Readable Deliverable
The CRA expects a maintained SBOM, and hand-curated ones are stale before release. How to generate CycloneDX in CI, sign it, and keep it true to what shipped.
Cloud Concentration Risk Under DORA, SS1/21 and the CTP Regimes
A practical reading of cloud concentration risk under DORA’s CTPP regime, the PRA’s SS1/21, and the UK Critical Third Party framework — written for the financial firms that depend on a small number of hyperscaler clouds and need to demonstrate they have thought about it. The financial services sector’s dependence on a small number of …
The upgrade that is really a rebuild
If your website runs on Umbraco 7, you have probably been told it needs upgrading, and you have probably assumed that means a routine update. It does not. Moving from Umbraco 7 to Umbraco 8 is not an upgrade in the normal sense. Umbraco’s own documentation is explicit: you cannot upgrade a version 7 site …
When the upgrade became a rebuild
Drupal 7 powered an enormous number of websites for well over a decade. If yours is one of them, you are now on a platform that reached the end of its official life in January 2025. No more security updates. No more fixes. And the path forward is not the gentle upgrade the version number …
The language that stopped being supported
Python is one of the most widely used programming languages in business software — it sits behind data tools, internal systems, automation and analytics in companies that would never describe themselves as technical. If a system you rely on was written in Python 2, you are running on a version of the language that was …
How technology compounds productivity
The most common technology investment narrative is additive. New system, new capability, new productivity. The assumption is that more technology produces more output. The reality is more nuanced. Technology compounds productivity when it removes friction from work that would otherwise happen more slowly, inconsistently, or not at all. Technology creates work when it adds process, …
The end-of-life nobody scheduled time for
Vue is a popular framework for building the interactive parts of websites and web applications. If something your business depends on was built with Vue 2, it is now running on a version that reached the end of its life at the end of 2023. The application still works, which is why this rarely makes …