Assorted Links — September 17, 2026

Good technology reading should leave you with a better question, not just another tab open. This week’s links are about making the dependencies behind a decision visible: credentials, supplier evidence, operating capability, human judgment, incident communication, and the physical connections inside ambitious systems.

Identity tokens deserve a lifecycle, not just a login flow

NIST and CISA’s finalized guidance treats access tokens as security objects that need protection, lifecycle controls, and deliberate ownership. The lesson travels beyond cloud providers: a token can outlive the moment when someone remembers issuing it, so its issuance, storage, rotation, and revocation deserve an owner.

Supply-chain traceability is an interoperability problem

NIST’s manufacturing traceability meta-framework focuses on organizing, linking, and querying provenance data across different ecosystems. That is a useful framing for any company that needs supplier evidence: the question is not merely whether a document exists, but whether the right people can find and use reliable evidence without exposing everything.

AI changes operating capability before it changes a product label

Gartner’s survey of 469 CEOs found that many expect AI to reshape operational capabilities. It is an analyst’s survey, not a universal forecast, but the practical prompt is sound: before buying another AI feature, decide which workflow, decision owner, quality check, and customer outcome should actually change.

Small-business commercialization needs a path, not only an invention

The National Science Foundation is launching a two-year, $20 million pilot aimed at helping small businesses move deep technologies toward commercial use. The interesting part is not the grant total. It is the recognition that mentorship, investor connections, and evidence about what works matter when an invention has to become a dependable business.

A status update is part of incident response

New joint FBI/CISA guidance for service providers treats communication during a cyber incident as an operational responsibility. A useful update says what is known, what is not yet known, and when the next update will arrive. That helps customers, employees, vendors, and leadership make better decisions while technical work continues.

AI adoption turns into a workforce question

Google Cloud’s vendor-authored 2026 trend report argues that AI agents will push organizations toward ongoing workforce development. Treat that as a perspective, not a prediction. Its most useful implication is still practical: a new tool changes little unless people know when to rely on it, when to check it, and who owns the result.

Human judgment remains a control in AI-enabled work

Microsoft’s India release of its Work Trend Index is not a U.S. small-business benchmark, but its emphasis on quality control and critical thinking is broadly useful. As tools take on more execution, the durable human jobs are setting standards, checking outputs, making tradeoffs, and remaining accountable for the decision.

The wiring harness is a spacecraft’s nervous system

NASA’s Dragonfly update highlights the cables carrying power and data through its Titan-bound rotorcraft. It is a satisfying engineering reminder: extraordinary missions still depend on ordinary interfaces, careful assemblies, and physical connections that must work together long after the presentation slides are over.