The Proof
Which means I make dated predictions and tell you when I was wrong. This page is how I do it — the system I run, the calls I've made, and the 25 years behind them.
The System
I don't write about AI disruption from the outside. I run my own AI infrastructure — memory, context, and a private knowledge base I query instead of renting someone else's guess. It drafts my morning brief; I review it in ninety seconds. That's the proof the thesis is real: I'm already past the arrival everyone else is bracing for.
How it works — and why it mattersThe Track Record
Predictions published with dates, confidence levels, and the evidence that would change my mind. Updated as the world updates me. When one resolves against me, it gets marked wrong — right here.
Anchorage, Fireblocks, the whole tier. Great gross numbers, no moat, no path to profitability. Custody is a commodity. The moat will be in infrastructure rails, not in holding the keys.
What would change my mind: A custodian achieving >30% net margins consistently, or custody becoming a regulated monopoly via legislation.
Open — resolves 2027
Enterprises trust their auditors. Canton, DTCC, tokenization — every serious conversation starts in the advisory relationship, not at a Web3 conference. Crypto-native firms don't have the compliance credibility to close enterprise.
Open — resolves 2028
AI is creating the same pattern I've survived three times. Most coaching targets early-career or C-suite. The whitespace is the 15-to-25-year professional watching their domain get disrupted. That's the audience for Plan for Thursday.
Open — resolves 2028
Three measurable signals — AI displacement, stablecoin interchangeability, and the quantum timeline — are already moving. I publish the data, not the opinion.
Tracked live at /canaries
I was wrong on the bill itself. The deeper thesis — that regulatory momentum on crypto was real — held; stablecoin legislation just moved first.
What would change my mind: The lesson: I was anchoring on one bill when the right anchor was the direction of motion.
WRONG — on the bill; the direction held
The Guide
I've been in information security since 1999. I started as a network engineer, then became the security officer inside a top-five financial firm. For the last decade, I'm the person executives call when the technology is new and the stakes are real.
Three stops: security consulting at KPMG, application security at Cigital, and security leadership at RSM — where in 2017 I built the blockchain and digital-asset practice from scratch, across audit, tax, and consulting. CISSP. I watched the dot-com crash, the 2008 crisis, and crypto winter from inside financial services. And I'm a girl dad from Chicago.
If you're reading this because AI is rewriting your job and you're trying to figure out what to do — you're the person this site exists for.
On stage since a 2006 Black Hat talk on phishing with the Asterisk PBX. These days it's blockchain and digital-asset risk — ACAMS, ISACA Convergence, Gies College of Business, the occasional podcast.
The full runThe 2006 Black Hat research got picked up across the security and VoIP press. Before that, a 2002 Crain's piece when I ran risk advisory at KPMG. Since then, contributor bylines at Infosecurity Magazine and SecurityWeek.
The coverage trail