Nimbus Data: remote-first should not mean unobserved

Nimbus is fully remote, with no corporate network and a deliberately light device policy.

The detail

Assembly gave them a run-level record without requiring a VPN or managed network path.

The first finding was uncomfortable: a third of runs came from tooling outside the sanctioned stack. It was remediated within a quarter.