- Human-in-the-loop autonomy: approval gates for high-impact actions
Home / Field notes
Field notesField notes
Practical notes from the team building R-O-D-E-O — on autonomous cyber operations, control-level compliance, air-gapped AI, and OT/ICS defense. Written for the people actually running security operations.
Automating CMMC 2.0 compliance
What CMMC 2.0 actually requires, why control-level mapping beats a compliance dashboard, and how continuous evidence changes your SPRS posture.
Read the note →Running security AI with no internet
Why cloud-only AI is a non-starter in air-gapped and classified environments, and what it takes to run local models — and keep them current — offline.
Read the note →Generating Sigma, Suricata & YARA detections
How detection engineering works across logs, network, and files — and how AI drafts rules from findings, with a human approving what ships.
Read the note →OT & ICS monitoring that stays safety-pinned
Why IT security tooling is dangerous on a control network, and how to defend SCADA — passively, human-gated — without ever touching the process.
Read the note →One control set, many frameworks
NIST 800-53, 800-171, ISO 27001, and SOC 2 mostly overlap. Map your controls once and let a single piece of evidence satisfy all of them.
Read the note →
Subscribe
Get RODEO field notes
Occasional notes on new detections, model releases, and platform updates — written for the people actually running security operations.
We’ll reply by email. No spam, unsubscribe any time. Privacy Policy.