I'm Simon Mullis. I've spent thirty years in cybersecurity. I write here about shipping agentic AI inside organisations that can't afford to get it wrong.
Writing
- Jul 2026 Thinking Aloud Darmok, Brown M&Ms, and the Bandwidth of Meaning Shared concepts are the highest-bandwidth channel between two minds, and the easiest place to agree on nothing.
- Jul 2026 Essay Compliance as an Inherited Property Why enterprise AI governance should work like a type system, not an audit queue.
- May 2025 Essay Right Finding, Wrong Fix A correct security finding can still take down the thing it was meant to protect. Severity and blast radius are different questions, and we only built a tool for one.