Nerdy Stuff. Tech Talk. Zero Freshness.
Analysis and commentary on GRC, security, and AI. Essays for operators and leaders who are tired of decorative governance, vendor theater, and fresh takes that were already stale on arrival.
These are not the newest pieces. They are the ones that explain the publication fastest: one argument about security theater, one about compliance theater, and one about AI governance theater.
Security
GRC
AI
If you are new to the site, start with one strong essay per beat and follow the argument from there.
GRC
Start with the pieces that explain how governance theater forms, then move into the essays that show where evidence, ownership, and control design actually break.
The cleanest entry point into the site’s anti-ceremony stance on compliance and control programs.
Open GRC guideSecurity
Read these if you want the site’s core security argument: most programs do not fail at tooling first. They fail at ownership, inventory, identity context, and operational clarity.
A foundational Spoiledlunch essay on what happens when architectural slogans meet real estates.
Open Security guideAI
Start here if you want the site’s consistent AI position: governance becomes real only once the system is deployed, observed, and capable of being challenged under live conditions.
The clearest statement of what Spoiledlunch rejects in enterprise AI governance.
Open AI guideSummary: Our approach to AI policy and political advocacy, transparency, support for thoughtful regulation and AI safety, and that …
Summary: The Securities and Exchange Commission today announced four new members to fill vacancies on its Investor Advisory …
Summary: OpenAI breaks ground on a 1GW data center project in Michigan as part of Stargate, building AI infrastructure to expand …
Summary: CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active …
Summary: OpenAI frontier models and Codex are now generally available on AWS, giving enterprises a new path to build with OpenAI …
Spoiledlunch publishes on purpose, not on a drip campaign. If you want every essay and briefing without surrendering your inbox, use the feed.
New to RSS? Learn how to get started with feed readers.
Different domains, same standard: name the failure mode, cut through the slogans, and stay close to operational reality.
Topic 01
Governance and compliance coverage for readers who are tired of decorative control programs and evidence that proves nothing.
Explore GRC
Topic 02
Security analysis that starts with ownership, exposure, and operational clarity instead of buying another dashboard.
Explore SecurityTopic 03
AI coverage for people who care more about deployed behavior, telemetry, and intervention than framework theater.
Explore AI