Essays and notes on AI security.https://www.manzambi.com/https://www.manzambi.com/writing/your-security-scanner-is-a-supply-chain-too/https://www.manzambi.com/writing/your-security-scanner-is-a-supply-chain-too/A post-mortem. The MCP scanner in my local red-team pipeline was defeated by a supply-chain problem, the exact class of risk security tooling exists to catch. One word, two package ecosystems, an acquisition, and weeks of quiet false confidence.Fri, 03 Jul 2026 00:00:00 GMThttps://www.manzambi.com/writing/eu-ai-act-delay-is-not-relief/https://www.manzambi.com/writing/eu-ai-act-delay-is-not-relief/The Omnibus is set to push standalone high-risk enforcement to December 2027. Every law firm called it relief. Having built the blueprint, I read it as a deadline for a multi-quarter engineering programme — and the clock starts now.Wed, 01 Jul 2026 00:00:00 GMThttps://www.manzambi.com/writing/local-redteaming-field-report/https://www.manzambi.com/writing/local-redteaming-field-report/A field report from building a fully-local, three-layer AI red-team pipeline on an Apple-silicon laptop: 28 fixes, a two-model nightly run, and the honest gap between a local 'pass' and an actual security verdict.Fri, 19 Jun 2026 00:00:00 GMThttps://www.manzambi.com/writing/nsa-mcp-csi/https://www.manzambi.com/writing/nsa-mcp-csi/Notes on the NSA's May 2026 MCP Security CSI and practical defensive and adversarial work in this space.Fri, 29 May 2026 00:00:00 GMThttps://www.manzambi.com/writing/secure-by-design-agentic-v1/https://www.manzambi.com/writing/secure-by-design-agentic-v1/How to spend a weekend implementing OWASP, NIST, and CSA guidance, and what I learned about where the real security boundaries live.Sat, 02 May 2026 00:00:00 GMT