Supply Chain Security Checklist for Small Teams After xz
Turn the xz-utils backdoor lesson into action: tarball vs git diffs, SBOM, Sigstore Cosign, SLSA provenance, and a solo/small-team release gate you can run this week.
A first OTel Collector, Prometheus, and Grafana lab: OTLP in, Prometheus scrape out, and a break-one-signal drill with measured PromQL.