From reading to practice
Tools for the next decision.
Worksheets to adapt, training to share, and the public library of workflows, baselines, and AI skills.
GitHub tools
Four ways to start. Each link opens in a new tab.
- Assess a platform baseline (opens in a new tab)Control catalogs and risk-assessment templates for Google Workspace, Microsoft 365, Cloudflare, AWS, and GitHub, built from current vendor documentation, with a local assessment tool.
- Run an automation (opens in a new tab)A change-readiness workflow with fictional inputs. Inspect its output and follow the checks behind it.
- Review your controls (opens in a new tab)Turn a fictional evidence register into a review queue that keeps missing, stale, and conflicting evidence visible.
- Learn with AI (opens in a new tab)Practice framing a task, supplying useful context, and checking the result with the prompting guide and portable skills.
Browse the whole Technology Operations Library (opens in a new tab)
Training
Lessons and guides to hand to colleagues.
- AI at Work: three habits for better workThree free lessons for everyone at work: frame the task, supply the right information, check the answer. No AI account needed.
- Research companion packNine working documents, four blank CSV templates, two fictional logs, and a quick checklist for evaluating AI workflows. Also help users build capability, download the editable pack, or read the full manuscript (PDF, 44 pages).
Worksheets
One for each article. Open, print, or download.
Showing 12 of 33 worksheets
Firm operations
- Service ownership mapCompanion to A technology operating model for a small investment firm
- Monitoring and response matrixCompanion to Designing observability for a small, high-trust firm
- Internet failover test recordCompanion to How to test internet failover and know what passed
- CRM migration acceptance recordCompanion to What to verify before a CRM migration is complete
- Recovery exercise scorecardCompanion to What a recovery test should actually prove
- Complexity reviewCompanion to Boring where boring is an advantage
- Automation handover and completion recordCompanion to Making automation easy to verify and hand over
- Open-source signal reviewCompanion to Reading a startup's open-source activity before the first round
- Valuation and reporting recordCompanion to Marking the portfolio while raising the next fund
Security
- Leadership security reviewCompanion to What a small investment firm should expect from its security program
- Vendor review and acceptance briefCompanion to Evaluating a vendor that will handle firm or portfolio data
- Offboarding verification checklistCompanion to Offboarding as a test of your access controls
- External sharing lifecycle reviewCompanion to Sharing sensitive information with a clear end to access
- Incident tabletop and decision logCompanion to The first decisions in an incident response
- OpenClaw deployment checklistCompanion to How I would deploy OpenClaw safely
- Agent authority reviewCompanion to OpenClaw got me thinking: how do we secure agency?
- Agent observation and containment reviewCompanion to Observing agents after the OpenAI Hugging Face incident
- Non-human identity registerCompanion to Non-human identities and the controls that govern them
- Incident record planCompanion to What the firm writes down after an incident
AI in practice
- AI workflow release reviewCompanion to When an AI workflow is ready for production
- AI connector and data-flow reviewCompanion to Before an AI assistant can access firm data
- AI task completion contractCompanion to When an AI task is actually finished
- AI pilot value scorecardCompanion to Measuring the value of an AI workflow
- Screening model reviewCompanion to Before a model screens the firm's deal flow
- Model-in-the-decision reviewCompanion to Letting a model into the investment decision
- Assistant rollout planCompanion to Who gets the AI assistant first
- Aloha project start and phase gate recordCompanion to Why I built Aloha for agents that build over weeks