Posts

Shorter paths into the model.

These first posts carry the same core structure as the thesis, but each one isolates a sharper angle for faster uptake and sharing.

What these posts do

Each post isolates one argument so it is easier to share and absorb.

The point is not just to repeat the thesis. It is to give someone a cleaner route into the model depending on whether they need the unit shift, the workflow argument, or the middle layer.

Public anchor

Public anchor: Apache HTTP Server path traversal to stronger control

Apache HTTP Server 2.4.49 and 2.4.50 provide a clean public case that grounds why the weakness label is not the whole story. Path traversal and file disclosure became a route toward stronger outcomes when CGI execution surfaces were available.

  • Primitive families. Reference control and disclosure are the recurring capability types the route exposes first.
  • Path role. The route acts as a foothold that becomes leverage gain and then a boundary-crossing bridge into a stronger execution surface.
  • Outcome class. The initial outcome is disclosure, but the higher-value surviving outcome can become execution when the environment permits it.
Unit shift

Security Is Shifting from Bugs to Paths

Make the core unit shift legible in a complete standalone article.

Use this piece when someone needs the shortest serious article that makes the shift from vulnerability labels to exploit-path reasoning legible.

Workflow claim

The Breakthrough Is Workflow, Not Magic

Counter the default model-hype interpretation and move attention toward process design.

Use this piece when the conversation drifts into benchmark mystique or model exceptionalism instead of system design.

Middle layer

Primitives, Patterns, and Validation Loops

Introduce the middle layer without trying to finish the entire taxonomy in one post.

Use this piece when the audience is ready for the capability layer but not ready for a full paper or taxonomy debate.

What to do next

If a post lands, move into the fuller model or the grounded examples.

The posts are meant to be entry points. Once one of them clicks, the next useful move is usually to read the thesis, open the paper, or inspect the grounded cases.

Read the thesis

Move into the fuller written model when you want the complete argument instead of one angle at a time.

Open the thesis

Read the spine paper

Use the long-form paper when you want the most durable and citable version of the framework.

Open the paper

See grounded cases

Use the case pages when you want to see the framework mapped onto real public examples.

Browse the cases