Managing MCP Connections Starts With the Request Path
A practical comparison of Microsoft's approaches to governing AI and MCP connections, why LiteLLM appeals to platform teams, and where the controls work together.
Operator's notebook
What holds up after the meeting.
I use this site to think in public, make sense of what I am learning, and keep a record of the ideas I want to come back to. It is a working library built from the work itself: security, cloud, AI, leadership, and the long game of execution.
Recent writing
Latest professional writing.
Security, AI, cloud, and commercial leadership. Personal essays live in the notebook archive.
techOct 20, 2026
Microsoft Agents: My Risk and Governance Map
Some agent builders look a lot like large prompt books. My working risk guideline starts with the authority we're adding, then follows the controls as that authority grows.
techOct 8, 2026
E3, E5, E7 on the Zero Trust Architecture
The same E3, E5, and E7 question, this time mapped onto the Microsoft Zero Trust architecture, component by component.
techOct 6, 2026
E3, E5, E7: What Each Step Adds to Security
A one-screen visual of the security coverage Microsoft 365 E3, E5, and E7 each add, mapped to the Cyber Defense Matrix.
techSep 22, 2026
Digital Sovereignty: A Three-Level Rubric
A three-level rubric for taking more control of the technology I own, with Reolink as a stepping stone and AI helping with the work.
techSep 3, 2026
MFA Everywhere Is Where Identity Programs Stall
A year ago I wrote a nine-layer identity maturity framework. The part that still holds up is the ordering, and the four gates that tell you whether you have earned the next layer.
techSep 2, 2026
Four Repos That Taught Me How to Work With AI, and Why I Deleted Them
I cut my GitHub account from 32 repositories to 9. Here is the rule I used, and what four of the deletions say about where AI actually helps.
About Thor
What keeps showing up in the work.
Trust, translation, and a longer view than the room usually wants to take.
The roles changed over time, but the pattern did not. I keep getting pulled toward work that rewards clarity, trust, and the ability to make complicated things usable for someone else.
Technology without theater
Architecture, platforms, and new tools explained in ways people can actually use.
Career advice without fluff
Momentum, feedback, habits, and positioning without pretending a title solves the problem.
Experiments worth keeping
Drafts, operating principles, and technology experiments captured before they disappear into a notes app.