01
State is not behavior.
A snapshot can be clean at 9 AM and the system can still be on a path to compromise by noon.
Building security for an autonomous world
Security must govern trajectories, not snapshots.
The first era of software security taught us to govern what we build. The next era must teach us to govern what our systems are allowed to become.
Available in hardcover, paperback, and Kindle.
A new security model for control planes, AI agents, and machine-speed systems
Himanshu TiwariFirst edition · 2026
Posture tells you where you are. Trajectory tells you where you are going.
Part I · The diagnosis
Three things are failing at once.
Modern risk is not best explained by a static state. It forms through sequence, accumulation, authority, and the disappearance of the human pause.
02
Risk is accumulation, not violation.
Permissions grow one diff at a time. No single change is critical. That is the problem.
03
Autonomy collapses the margin for error.
The unwritten human buffer that absorbed structural weakness for 20 years is no longer in the loop.
A snapshot can be accurate and still mislead.
“Watching the wrong unit more often doesn’t make it the right unit to watch.”
Chapter 2 · The Snapshot FallacyA progression of questions
From what exists to what can become.
This is the book’s progression of security questions - not an implementation sequence. Each question moves the unit of reasoning farther upstream.
State
Where are we?
State describes what exists.
Behavior
How did we get here?
Behavior explains how the system moved.
Decisions
What decisions brought us here?
Decisions explain which path was chosen.
Trajectory governance
What futures are possible from here?
Trajectory governance determines which paths can be chosen at all.
Chapter 4 · Trajectory Governance
Trajectory governance is the practice of shaping which sequences of action are possible within a system.Beyond Posture
D
Decision space
The set of meaningful actions, transitions, and future states available to a system given its authority, workflows, interfaces, and trust relationships.
C
Control plane
A control plane isn’t just where a system is administered. It is where authority is authored.
S
Structural constraints
Unsafe trajectories are made unreachable by design through architecture, interfaces, authority boundaries, and valid transitions.
Risk is often created not by what becomes noncompliant, but by what becomes connected.
Level 1 · Structural constraints
The system does not merely detect or reject the bad move. It does not offer the bad move as a normal option.
The unsafe sequence is not detected faster. It is absent.
Governance before autonomy
Autonomy isn’t the disruption. Autonomy is the reveal.
It reveals whether safe patterns have already propagated - and whether broad authority, inherited trust, and off-road workflows have already become normal.
You can audit a script. You must constrain an agent.
Automation
Follows a script. Its path is fixed in advance and can be reviewed line by line.
Agency
Follows an objective. It interprets, adapts, selects, and navigates toward an outcome.
The shift
Security moves from verifying execution to governing motion and decision authority.
Part IV · The leader’s pivot
The leader’s pivot.
Posture-era CISO
Trajectory-governed CISO
Reviews exception tickets
Co-authors the paved road
Reports compliance scores
Reports DAR coverage and Trust Inflation trend
Rewarded for catching unsafe behavior
Rewarded for making unsafe behavior unreachable
Operates as a reviewer
Operates as a builder
The next decade of security leadership belongs to builders.
Part IV · The transition
The Sovereign Hybrid.
How to get from where you are to where the model points - without stopping the business.
01
Subsidize
Make the trajectory-governed path cheaper than the legacy path. Platform investment is the security investment.
02
Instrument
Measure decision space, not just inventory. DAR coverage. MTTA. Trust Inflation trend.
03
Deprecate
Mark the legacy path for end-of-life. Date-stamped. Communicated. Believed.
04
Enforce
Remove the legacy path. Constraint becomes structural. The unsafe trajectory is no longer reachable.
Hybrid is the strategy. Sovereignty is the destination. Speed is the dividend.
The book behind the framework
Beyond Posture
Why Security Must Govern Trajectories, Not Snapshots
A practical argument for moving security from static posture and downstream correction toward decision space, structural constraints, and governed authority.
PART IThe Illusion of Control
PART IIRedefining Security
PART IIIInstitutionalizing Structural Constraints and Trajectory Governance
Available in hardcover, paperback, and Kindle.
“A visionary framework of trajectory governance ... enabling innovation that is both deeply personalized and powerfully effective at enterprise scale.”
Miguel E. LakkisPresident, Bitbug, Inc. · 3x CISO
“Beyond Posture opens the discussion on a new way of thinking about cybersecurity risk by focusing on the trajectories and environmental conditions that ultimately lead to material exposure.”
Scott Barronton3x CISO · Diebold Nixdorf, Finastra, D+H
Begin with one deletion
Pick one workflow. Delete one unsafe future. Then make that deletion durable.
Trajectory governance becomes real when a known unsafe path is no longer available through normal work.
Stay on the trajectory
Get launch news and field notes.
Book updates, new essays, and practical resources on trajectory governance - sent occasionally.