https://www.millabs.net/blog/ Field notes on deploying commercial software into hardened DoW and IC enclaves. en-us https://www.millabs.net/blog/wave-migration-frees-budget/ https://www.millabs.net/blog/wave-migration-frees-budget/ Tue, 01 Sep 2026 00:00:00 GMT A phased migration off dedicated weapon system infrastructure: the waves, the math, and where the recovered budget goes. https://www.millabs.net/blog/enterprise-meets-availability-requirement/ https://www.millabs.net/blog/enterprise-meets-availability-requirement/ Thu, 27 Aug 2026 00:00:00 GMT The assumption that dedicated infrastructure is more reliable, tested against systems already running on enterprise platforms. https://www.millabs.net/blog/weapon-system-it-infrastructure-cost/ https://www.millabs.net/blog/weapon-system-it-infrastructure-cost/ Tue, 25 Aug 2026 00:00:00 GMT Dedicated servers, storage and staff per weapon system. Why that cost became invisible, what it includes, and what the numbers look like. https://www.millabs.net/blog/cheapest-bid-most-expensive-authorization/ https://www.millabs.net/blog/cheapest-bid-most-expensive-authorization/ Fri, 21 Aug 2026 00:00:00 GMT The lowest bid often carries the highest authorization cost. Where that cost hides, how it kills projects, and what to ask for before award. https://www.millabs.net/blog/radar-software-authorization-problem/ https://www.millabs.net/blog/radar-software-authorization-problem/ Fri, 21 Aug 2026 00:00:00 GMT Radar, sensor and C2 systems ship software that needs its own authorization path. What surfaces late, and how to scope it before delivery. https://www.millabs.net/blog/vendor-deployment-readiness-questions/ https://www.millabs.net/blog/vendor-deployment-readiness-questions/ Thu, 20 Aug 2026 00:00:00 GMT Five questions that separate a vendor who has actually deployed to a hardened DoD baseline from one who only assumes they can. https://www.millabs.net/blog/program-office-integration-cost/ https://www.millabs.net/blog/program-office-integration-cost/ Wed, 19 Aug 2026 00:00:00 GMT The integration and O&M cost that lands on the receiving IT team after delivery, why nobody estimates it, and what a program office can do. https://www.millabs.net/blog/commercial-app-hits-hardened-baseline/ https://www.millabs.net/blog/commercial-app-hits-hardened-baseline/ Tue, 18 Aug 2026 00:00:00 GMT What breaks when a commercial app first meets a hardened DoD baseline: Kyverno admission failures, image provenance, and what the model got wrong. https://www.millabs.net/blog/authorization-estimate-too-high/ https://www.millabs.net/blog/authorization-estimate-too-high/ Tue, 18 Aug 2026 00:00:00 GMT Why a DoD authorization cost estimate defaults to worst case, and what replacing unknowns with deployment findings does to the ATO cost estimate. https://www.millabs.net/blog/openproject-hardened-enclave-deployment/ https://www.millabs.net/blog/openproject-hardened-enclave-deployment/ Mon, 17 Aug 2026 00:00:00 GMT Deploying OpenProject into a hardened DoD enclave on Big Bang: hardened Ruby image, managed PostgreSQL, Kyverno admission, and the 10 findings deployment produced. https://www.millabs.net/blog/why-we-built-a-big-bang-lab/ https://www.millabs.net/blog/why-we-built-a-big-bang-lab/ Mon, 17 Aug 2026 00:00:00 GMT Why Millabs runs a private Big Bang instance, and which deployment failures it catches weeks before a program-office platform ever sees your container. https://www.millabs.net/blog/model-vs-deployment-findings/ https://www.millabs.net/blog/model-vs-deployment-findings/ Mon, 17 Aug 2026 00:00:00 GMT An architecture model predicted 27-32 findings. The deployment produced 10. Why both numbers matter for authorization timeline and cost. https://www.millabs.net/blog/what-enclave-fit-study-delivers/ https://www.millabs.net/blog/what-enclave-fit-study-delivers/ Tue, 11 Aug 2026 00:00:00 GMT What an enclave fit study delivers: hardened Dockerfiles, a CI/CD pipeline, operational manifests, and a scoped finding register, not advice. https://www.millabs.net/blog/data-co-mingling-authorized-environments/ https://www.millabs.net/blog/data-co-mingling-authorized-environments/ Tue, 04 Aug 2026 00:00:00 GMT Government data, contractor data, and several programs in one authorized system: who owns what, and what surfaces at the first incident. https://www.millabs.net/blog/missing-managed-service-problem/ https://www.millabs.net/blog/missing-managed-service-problem/ Tue, 21 Jul 2026 00:00:00 GMT No managed database in a DoD enclave: what it costs to containerize PostgreSQL or MSSQL on a hardened baseline, and when to redesign instead. https://www.millabs.net/blog/it-integration-cost-nobody-scopes/ https://www.millabs.net/blog/it-integration-cost-nobody-scopes/ Tue, 14 Jul 2026 00:00:00 GMT The ATO integration cost nobody scopes: what the receiving IT team needs at handoff, and who pays for it when it is missing from the estimate. https://www.millabs.net/blog/hardware-systems-software-ato/ https://www.millabs.net/blog/hardware-systems-software-ato/ Tue, 30 Jun 2026 00:00:00 GMT Sensors, weapon systems, and embedded platforms all ship software, and that software needs an ATO. What hardware programs miss when they scope RMF. https://www.millabs.net/blog/from-docker-to-classified/ https://www.millabs.net/blog/from-docker-to-classified/ Tue, 16 Jun 2026 00:00:00 GMT One product's path from a Docker image to IL-4 and TOP SECRET on JWICS: the gates it passed, the rework it took, and the timeline that held.