Supply Chain Security
In-depth guides and analysis on supply chain security from the Safeguard engineering team.
100 articles
XMPP Explained: RFC 6120, TLS, SASL, OMEMO and Secure Self-Hosting
XMPP is the IETF's federated chat protocol. How streams, TLS, SASL SCRAM, dialback and OMEMO work, what servers still see, and how to self-host safely.
How a Pacemaker Is Made: Leads, Batteries, Sealing and Firmware
A pacemaker is a lithium cell, a low power circuit and firmware sealed in welded titanium, wired to the heart by coiled leads. How each part is built and tested.
How RFID Tags Are Made: RAIN Inlays, Chips, EPC Gen2 and Privacy
A UHF RAIN RFID tag is a tiny chip bonded to a printed or etched antenna on plastic film, encoded with an EPC and read by backscatter under the Gen2 standard.
CentOS 7 After End of Life: Vault, Migration Paths and What to Patch
CentOS 7 reached end of life on 30 June 2024. Its packages sit frozen on vault.centos.org. How to find it, migrate, buy time safely and decide what to patch.
Debian Governance Explained: Constitution, DPL, Tech Committee and GRs
Debian is run by its developers under a 1998 constitution: an elected leader, a Technical Committee and ranked General Resolutions. Here is how each works.
How Quantum Computers Are Cooled: Dilution Fridges and Helium-3
Superconducting qubits run near 10 mK inside a dilution refrigerator that mixes helium-3 and helium-4. How the stages, wiring and heat budget work.
Durable Execution for AI Agents: Checkpoints, Retries, Approvals
Durable execution saves agent progress so a crash or a long human approval does not lose work or repeat actions. How checkpoints and idempotent tools work.
protobom and bomctl Explained: Format-Neutral SBOM Handling
protobom is an OpenSSF data model and Go library that reads and writes SPDX and CycloneDX; bomctl is its CLI for fetching, merging and exporting SBOMs.
Manjaro Linux Release History: Arch Base, Branches, Pamac, Updates
Manjaro is a rolling Arch derivative that holds packages in unstable and testing before stable. Its release history, branches, Pamac and kernels explained.
How to Start a Wireless ISP: Spectrum, Towers, Radios and Security
Start a WISP: pick spectrum (5 GHz, 6 GHz, CBRS, licensed links), plan towers and link budgets, build a core, file with the FCC and lock down subscribers.
IMSI Catchers Explained: Cell Site Simulators, 5G and Detection
An IMSI catcher poses as a cell tower to collect phone identifiers. How it works, what 5G SUCI changes, how detection works and how to turn off 2G.
Period Tracking App Privacy: What Cycle Apps Collect and Who Sees It
What period and fertility apps collect, why HIPAA rarely applies, what the FTC and Washington law require, and settings that keep your cycle data yours.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.