Thinking Machine
Open menu
Notes

Cross-domain analogies we make on calls.

Short essays on patterns that travel between sectors. Healthcare integration into IoT. Energy NFR practice into SaaS. The kind of thing we'd say on a thirty-minute call, written down.

14 May 2026 · CRA · Cyber Resilience Act · NIS2

CRA Article 14 reporting clocks: what 24h, 72h, 14d, and 30d actually require

From 11 September 2026, every manufacturer placing a product with digital elements on the EU market is on the clock the moment an actively-exploited vulnerability or severe incident is identified. Four reporting clocks, four different deliverables, one single notification platform. Here is the operational reality, not the press-release version.

Read note
9 May 2026 · NFR · Energy · SaaS

What energy-sector procurement NFR practice can teach SaaS vendors

The NFR catalogues that tier-1 energy operators send to vendors are intimidating, but they encode a discipline that SaaS vendors can copy: write the requirements you'd want a vendor to meet, then meet your own. The result is a competitive moat in any regulated-customer deal.

Read note
9 May 2026 · IoT · Healthcare IT · Integration

What healthcare lab integration taught me about IoT device onboarding

The diagnostic-instrument integration playbook from hospital IT translates almost line-for-line to multi-vendor IoT device onboarding. Same heterogeneous vendor landscape, same identity problem, same per-device commissioning friction — and the lab world has a thirty-year head start.

Read note
9 May 2026 · NFR · Healthcare IT · Energy

Why your healthcare-IT NFR matrix should look like an energy-sector one

Healthcare-IT vendors handed a hospital procurement NFR catalogue tend to react with the same mild horror SaaS vendors react to energy-sector matrices with. The fix is the same: copy the discipline the more scarred sector has already paid for. Five patterns that move.

Read note
Selected writing elsewhere

Long-form notes live here. Shorter pieces and personal-voice essays appear from time to time on Medium and LinkedIn Articles. Where the same idea is published in two places, the canonical version is the one on this page; the cross-post acknowledges it.

New notes are added when a cross-domain pattern is fresh enough to be useful. We do not run a newsletter; if you want a ping when new notes ship, subscribe to the RSS feed or watch the repository on GitHub.