Jakob Lange — InsightsLong-form articles, guides and field notes on AI engineering, sovereignty, compliance and the human side of security.https://jakoblange.cloud/enDeterminism is built around the model, not into ithttps://jakoblange.cloud/insights/determinism-is-built-around-the-model/https://jakoblange.cloud/insights/determinism-is-built-around-the-model/A language model will not give the same answer twice, and no prompt changes that. What can be made deterministic are the properties that matter: what never happens, what always happens, in which order and shape, and what cannot ship unverified. A close reading of Claude Code shows where instructions end, where guarantees begin, and where people belong.Fri, 18 Sep 2026 00:00:00 GMTai-agentsai-engineeringcontext-engineeringai-securityai-acthej@jakoblange.cloudBuild, buy or partner: an AI decision framework with real costshttps://jakoblange.cloud/insights/build-buy-or-partner-ai-decision-framework/https://jakoblange.cloud/insights/build-buy-or-partner-ai-decision-framework/Every AI option buys three things at once: a capability, a dependency and an option on the future. A decision method with three gates, a three-year cost model that includes leaving, explicit lock-in and sovereignty scores — and why the honest answer is usually a hybrid.Mon, 07 Sep 2026 00:00:00 GMTai-strategydata-sovereigntyai-engineeringplatformhej@jakoblange.cloudBerlin's data leak: not paying the ransom is an architecture decisionhttps://jakoblange.cloud/insights/berlin-leak-not-paying-is-an-architecture-decision/https://jakoblange.cloud/insights/berlin-leak-not-paying-is-an-architecture-decision/On 4 September 2026 the Rhysida group published 1.44 million files from two Berlin Senate administrations after the state refused a 30-bitcoin ransom. Refusing was right. What made it expensive was decided years earlier: identity, segmentation, data hygiene, egress monitoring and a consolidation that never happened.Sun, 06 Sep 2026 00:00:00 GMTcyber-resilienceinfrastructuresecurity-behaviourdata-integrityhej@jakoblange.cloudFrontier AI has changed cyber security for goodhttps://jakoblange.cloud/insights/frontier-ai-changed-cyber-security-for-good/https://jakoblange.cloud/insights/frontier-ai-changed-cyber-security-for-good/Frontier models turned expert attention — the scarce input on both sides of cyber security — into a metered commodity. What that changed for attackers and for defenders, why the exploit window collapsed to hours, and why "nobody is looking at our custom code" stopped being a defence.Thu, 03 Sep 2026 00:00:00 GMTai-securitysecurity-behaviourplatformai-strategyhej@jakoblange.cloudWhich AI use cases pay for themselves within a year?https://jakoblange.cloud/insights/which-ai-use-cases-pay-for-themselves/https://jakoblange.cloud/insights/which-ai-use-cases-pay-for-themselves/A portfolio method for AI use cases: four value mechanisms and how much of each reaches the profit and loss, a business case built on measured baselines and an honest adoption assumption, a value–feasibility map with the AI Act drawn on it — and the business-development half most strategies forget.Thu, 03 Sep 2026 00:00:00 GMTai-strategyai-actknowledge-managementai-engineeringhej@jakoblange.cloudDORA for engineering teams: what the regulation actually asks of your systemshttps://jakoblange.cloud/insights/dora-for-engineering-teams/https://jakoblange.cloud/insights/dora-for-engineering-teams/A translation of the Digital Operational Resilience Act from legal text into engineering requirements — ICT risk, incident reporting, resilience testing, third-party risk — with what it means for teams that build and run AI and platform systems.Tue, 11 Aug 2026 00:00:00 GMTdoradata-integrityinfrastructureai-engineeringhej@jakoblange.cloudData sovereignty is an engineering propertyhttps://jakoblange.cloud/insights/data-sovereignty-is-an-engineering-property/https://jakoblange.cloud/insights/data-sovereignty-is-an-engineering-property/Sovereignty is decided in architecture, not in contracts: where data physically lives, which law can reach it, who holds the keys, and whether you can leave. A design method for EU-conform AI and platform hosting.Tue, 14 Jul 2026 00:00:00 GMTdata-sovereigntyeu-hostingdeploymentinfrastructurehej@jakoblange.cloudContext engineering: your token budget is your architecturehttps://jakoblange.cloud/insights/context-engineering-token-budget-is-architecture/https://jakoblange.cloud/insights/context-engineering-token-budget-is-architecture/Why most production failures of LLM systems are context failures, how tokenization shapes cost and quality, and a practical method for designing context windows as deliberately as you design a database schema.Tue, 16 Jun 2026 00:00:00 GMTcontext-engineeringai-engineeringknowledge-managementhej@jakoblange.cloudSocial engineering in the age of generative AI: assess behaviour, not awarenesshttps://jakoblange.cloud/insights/social-engineering-tactics/https://jakoblange.cloud/insights/social-engineering-tactics/The classic social-engineering tactics, what generative AI has changed about them, why annual awareness training does not move the numbers, and how behaviour assessments and designed workflows do.Mon, 04 Mar 2024 00:00:00 GMTsocial-engineeringsecurity-behaviourresearch-methodshej@jakoblange.cloud