The PLD Disclosure-of-Evidence Duty: Why Your Logs and Design Docs Are Now Litigation Discovery
September 30, 2026
The revised Product Liability Directive lets claimants compel disclosure of technical evidence and can presume a defect when you cannot produce it. Here is the record to build.
Baseline systemd Service and Timer Setup for a Scheduled Job
September 30, 2026
A systemd timer is two files and a lot of capability people never use. Set up a oneshot service and its timer with catch-up, randomised delay, a dedicated user and sandboxing.
An nginx Reverse Proxy Config That Passes the Right Headers to Your App
September 30, 2026
A copy-pasteable nginx reverse proxy server block that preserves the client IP, sets X-Forwarded-Proto, keeps WebSockets alive and reuses upstream connections.
The GDPR Procedural Regulation: What Harmonised Cross-Border Enforcement Changes for Your DPO
September 30, 2026
The GDPR Procedural Regulation standardises how data protection authorities handle cross-border complaints from April 2027. Here is what the compressed timelines and higher evidence bar mean in practice for a DPO.
Issuing Qualified Electronic Attestations of Attributes: Becoming a QEAA Provider in the Wallet Ecosystem
September 30, 2026
Businesses can issue attestations such as membership, licence or employment into users’ EUDI Wallets, but the qualified route means becoming a trust service provider. Here is what the QEAA path actually commits you to.
Selective Disclosure and the EUDI Wallet: Verifying Age or Status Without Harvesting Identity
September 30, 2026
The EUDI Wallet lets verifiers confirm age or status without collecting full identity. A hands-on look at building SD-JWT and mdoc selective-disclosure flows that request only the attribute you need and log lawfully.
Connecting to the EU Consolidated Tape: What EuroCTP Selection Means for Your Data Plumbing
September 29, 2026
With EuroCTP selected as the EU consolidated tape provider for shares and ETFs, here is a reference design for consuming the tape: ingestion, normalisation, reconciliation and where it changes your market-data plumbing.
Workload Identity With SPIFFE/SPIRE: Killing Static Service Credentials
September 29, 2026
Shared service credentials are the secret that eventually leaks and cannot be attributed. SPIFFE and SPIRE give every workload a short-lived, cryptographically attested identity so services authenticate on proven identity, not a stored password.
auditd Baseline: Turning On the Linux Audit Trail You’ll Wish You Had After an Incident
September 29, 2026
A defensible auditd baseline for Linux: watch sudoers, SSH keys and privileged execve, tag events with keys, load from rules.d, and keep the log searchable.
ESG Risk in CRR3/CRD6: Instrumenting Environmental Risk in the Capital Stack
September 29, 2026
CRD6 turns ESG risk from a disclosure exercise into a supervised prudential input. Here is the data plumbing, scenario feeds and risk-appetite instrumentation a supervisor will actually inspect.