Nerdy Stuff. Tech Talk. Zero Freshness.
Analysis and commentary on GRC, security, and AI. Essays for operators and leaders who are tired of decorative governance, vendor theater, and fresh takes that were already stale on arrival.
These are not the newest pieces. They are the ones that explain the publication fastest: one argument about security theater, one about compliance theater, and one about AI governance theater.
Security
GRC
AI
If you are new to the site, start with one strong essay per beat and follow the argument from there.
GRC
Start with the pieces that explain how governance theater forms, then move into the essays that show where evidence, ownership, and control design actually break.
The cleanest entry point into the site’s anti-ceremony stance on compliance and control programs.
Open GRC guideSecurity
Read these if you want the site’s core security argument: most programs do not fail at tooling first. They fail at ownership, inventory, identity context, and operational clarity.
A foundational Spoiledlunch essay on what happens when architectural slogans meet real estates.
Open Security guideAI
Start here if you want the site’s consistent AI position: governance becomes real only once the system is deployed, observed, and capable of being challenged under live conditions.
The clearest statement of what Spoiledlunch rejects in enterprise AI governance.
Open AI guideSummary: The Securities and Exchange Commission released a report to Congress today highlighting policy recommendations from the …
Summary: CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active …
Summary: Ticket broker Elite Events and its operators will pay $300,000 in civil penalties to resolve Federal Trade Commission …
Summary: New OpenAI research shows how AI is expanding what workers do, with ChatGPT users taking on tasks across roles and …
Summary: The Securities and Exchange Commission announced today that it will host a roundtable on Sept. Why it matters: This …
Spoiledlunch publishes on purpose, not on a drip campaign. If you want every essay and briefing without surrendering your inbox, use the feed.
New to RSS? Learn how to get started with feed readers.
Different domains, same standard: name the failure mode, cut through the slogans, and stay close to operational reality.
Topic 01
Governance and compliance coverage for readers who are tired of decorative control programs and evidence that proves nothing.
Explore GRC
Topic 02
Security analysis that starts with ownership, exposure, and operational clarity instead of buying another dashboard.
Explore SecurityTopic 03
AI coverage for people who care more about deployed behavior, telemetry, and intervention than framework theater.
Explore AI