Research from the Cloud Security Alliance's Chief Innovation Office (CINO). This is the evidence, decision records, and scored predictions behind CINO columns, reports, and plugins.
Every topic here follows the same ladder, as far as it has climbed:
| Layer | What it's for |
|---|---|
| Idea | the question worth investigating |
| Column or report | the argument, so people can read it |
| Research (this repo) | the evidence, so people can check it |
| Plugin | the practice, so people can do it (csa-plugins-official) |
Not every topic reaches every layer. A topic only gets a plugin when it prescribes something an AI can actually do.
| Topic | Type | Status | Column | Plugin | Next check |
|---|---|---|---|---|---|
| why-is-telemetry | column-research | active | Circle News 91 (Sep 2026) | planned | 2026-11-15 |
Each topic's README.md starts with YAML front matter holding the same fields, so this table can be
checked against them.
README.md: what the topic is, where it stands, and which files to start with.KnowledgeBOM.md: the Knowledge Bill of Materials. It lists every claim the work relies on, its source, and whether it has been verified.CognitiveBOM.md: the Cognitive Bill of Materials. It records how the thinking went: the decisions made, the alternatives rejected, what was superseded, and what we expected to happen.experiment-log.md, where present: append-only predictions with check-by dates, scored when they come due. Wrong predictions are kept. The git history shows each prediction was written before its outcome.
- Provides: public, checkable research behind CINO work: claim ledgers (KnowledgeBOM), decision ledgers (CognitiveBOM), append-only scored predictions, and reusable templates.
- Depends on: CSA's internal CINO writing and engineering workspaces, where the working research is done. Topics are exported from there at milestones. Experiment logs and templates are original here.
- Enables: plugins in
csa-plugins-official that turn a
topic's practice into something people can install (planned for
why-is-telemetry). - Feeds into: CSA Circle News columns, reports, and Labs material, which link here for their evidence.
- Related: CSA's public MCP servers, e.g. csa-zendesk, whose experiments are cited as first-person evidence.
Content is licensed under CC BY 4.0. Share and adapt it, with attribution to the Cloud Security Alliance.
"Cloud Security Alliance", "CSA" and the CSA logo are trademarks of the Cloud Security Alliance, and no licence here grants rights to them.
Open an issue, with the topic name in brackets at the start of the title, e.g.
[why-is-telemetry] .... Corrections to claims are especially welcome. They are logged in the
topic's KnowledgeBOM, not silently fixed.