Gray Matter — Zero Trust + Agentic AIEinblicke in Zero-Trust-Architektur, Agentic-AI-Governance, Graduated Autonomy und spec-driven Development von Nikola Novoselec.https://graymatter.ch/deIntegration is the Architecture: The Floor Under Zero Trusthttps://graymatter.ch/de/blog/the-floor-under-zero-trust/https://graymatter.ch/de/blog/the-floor-under-zero-trust/North-South is the door. East-West is the hallways. Network as a Service is the floor they are both standing on - and, on the worst day, the net beneath them. The least glamorous layer in the stack is the most load-bearing.Tue, 04 Aug 2026 00:00:00 GMTZero TrustNetwork as a ServiceSecurity ArchitectureEnterprise SecurityNikola NovoselecIntegration is the Architecture: The Two Worlds of Microsegmentationhttps://graymatter.ch/de/blog/two-worlds-of-microsegmentation/https://graymatter.ch/de/blog/two-worlds-of-microsegmentation/One camp secures the network you already have. The other decides the network should not exist unless you are allowed to see it. You would love to run both. Most enterprises will not.Fri, 05 Jun 2026 00:00:00 GMTZero TrustMicrosegmentationSecurity ArchitectureAgentic AINikola NovoselecThe Enterprise Coding Agent: From YOLO Mode to Zero Trust Governancehttps://graymatter.ch/de/blog/agentic-coding-zero-trust-governance/https://graymatter.ch/de/blog/agentic-coding-zero-trust-governance/Spec-driven development paired with the right harness turns an autonomous coding agent into a production powerhouse. Drop that setup into a regulated enterprise without governance and the security team will shut it down in five minutes - and they would be right to do so. Here is the control plane that makes agentic coding safe at enterprise scale.Tue, 05 May 2026 00:00:00 GMTAgentic AIZero TrustAI GovernanceSpec-Driven DevelopmentAgentic CodingNikola NovoselecThe Spec Grew Up: What Happened After 542 Lines Became a Producthttps://graymatter.ch/de/blog/spec-driven-development-part-2/https://graymatter.ch/de/blog/spec-driven-development-part-2/Two months ago I published a 542-line spec and said 'the code is a side effect.' The spec is now 4,400 lines. The code is over 100,000 lines. Here's what happened when the spec stopped being a document and became the product.Sun, 19 Apr 2026 00:00:00 GMTAgentic AISpec-Driven DevelopmentAgentic CodingSoftware EngineeringNikola Novoselec5 Things About Zero Trust You Only Learn at Scalehttps://graymatter.ch/de/blog/five-things-about-zero-trust/https://graymatter.ch/de/blog/five-things-about-zero-trust/Zero Trust was never just a security initiative. It was an architectural bet - and the companies that made it early are about to collect.Wed, 25 Mar 2026 00:00:00 GMTZero TrustSecurity ArchitectureEnterprise SecurityNikola NovoselecThe Evaluation Nobody Publishes: What Analyst Reports Won't Tell You About Zero Trusthttps://graymatter.ch/de/blog/the-evaluation-nobody-publishes/https://graymatter.ch/de/blog/the-evaluation-nobody-publishes/Everyone saw the architecture. Nobody saw the evaluation behind it. We read every major analyst report. Then built a framework that disagreed with all of them.Fri, 20 Mar 2026 00:00:00 GMTZero TrustSecurity ArchitectureEnterprise SecurityNikola NovoselecThe Code is a Side Effect: Spec-Driven Development in the Coding Agent Erahttps://graymatter.ch/de/blog/spec-driven-development/https://graymatter.ch/de/blog/spec-driven-development/Everyone's talking about AI writing code. Almost nobody's talking about why most of it ends up in the trash. ~70,000 lines of code later, I accidentally built my favorite development environment.Sun, 15 Mar 2026 00:00:00 GMTAgentic AISpec-Driven DevelopmentAgentic CodingSoftware EngineeringNikola NovoselecIntegration is the Architecture: Zero Trust at National Scale (Part 1)https://graymatter.ch/de/blog/integration-is-architecture/https://graymatter.ch/de/blog/integration-is-architecture/How do you bring Zero Trust to an organization that is older than the concept of a computer? Architecting the transition felt like changing the engines on a plane mid-flight - while that plane was carrying the entire population of a nation.Tue, 20 Jan 2026 00:00:00 GMTZero TrustSecurity ArchitectureEnterprise SecurityNikola NovoselecThe Great Decoupling Part II: From Designing the Loop to Running Ithttps://graymatter.ch/de/blog/the-great-decoupling-part-2/https://graymatter.ch/de/blog/the-great-decoupling-part-2/I put a small AI model in charge of my firewall. Then I hired a larger model to watch it. Not just to save time - but because humans are no longer fast enough to stop machine-led attacks.Sat, 17 Jan 2026 00:00:00 GMTAgentic AIGraduated AutonomyAI GovernanceZero TrustSecurity ArchitectureNikola NovoselecThe Great Decoupling: From Writing Code to Designing the Loophttps://graymatter.ch/de/blog/the-great-decoupling/https://graymatter.ch/de/blog/the-great-decoupling/Something is shifting in how we build and protect systems. The center of gravity is moving - from writing logic to managing systems that generate it. What hit development is about to hit security. Are you ready?Thu, 08 Jan 2026 00:00:00 GMTAgentic AIAI GovernanceGraduated AutonomyZero TrustSecurity ArchitectureNikola NovoselecThe Quiet Shift: From Enforcing Rules to Enforcing Baselineshttps://graymatter.ch/de/blog/the-quiet-shift/https://graymatter.ch/de/blog/the-quiet-shift/The era of the static security rule is ending. As modern organisations roll out new infrastructure on edge platforms, a pattern is emerging that deserves more attention: legacy security components are getting smarter.Wed, 07 Jan 2026 00:00:00 GMTZero TrustAI SecuritySecurity ArchitectureNikola Novoselec