Sandra Carielli shares cybersecurity research at Forrester, including work on post-quantum security, data breaches and privacy, and questions security leaders can ask technology vendors.
Buyers can ask vendors about roadmaps, current posture, crypto agility, operational impact, third-party risk.
Breach and privacy work covers supply chains, ransomware, SaaS-to-SaaS exposure, privileged insiders.
Check first: Confirm with Forrester whether vendor-sponsored sessions or co-produced assets are possible before committing budget.
Main ideas
Post-quantum readiness belongs across the organization · Test vendors’ readiness with specific questions · Use breach and enforcement data to find neglected risks
Sandra Carielli shares Forrester cybersecurity research on post-quantum security, data breaches and privacy, and application security.
Their posts show how major security changes reach beyond security teams, connecting technical readiness to infrastructure, procurement, risk, and vendor decisions.
Their public work also includes guidance on questions buyers can ask technology vendors about quantum readiness.
Carielli’s posts turn broad security risks into coordinated, practical work.
In their summaries of post-quantum research, they identify who needs to participate—from security and development to procurement—and recommend actions such as mapping cryptographic dependencies and checking vendors’ roadmaps.
Their vendor-readiness summary gives buyers concrete questions about roadmaps, current posture, crypto agility, operational impact, and third-party risk.
Their breach and privacy work offers a different lens, drawing on annual incident and enforcement data to identify recurring risks, including software supply chains, ransomware, SaaS-to-SaaS exposure, and privileged insiders.
Across these topics, they focus on actionable research and cross-functional decisions.
Sandra Carielli’s posts present cybersecurity readiness as coordinated, practical work: organizations need to involve the teams that own each risk, ask vendors for details, and use data to identify where attention is needed.
Read more
Post-quantum security is the clearest recurring example; breach analysis and application-security programming show the wider range of risks highlighted in the posts.
Post-quantum readiness belongs across the organization
Carielli argues that preparing for post-quantum cryptography is not just a security-team task.
Read more
Security, infrastructure, development, risk, innovation, and procurement all have a part in migration, so siloed planning can leave important work unowned. The post urges organizations to start with manageable steps rather than wait for certainty about the timeline.
In a report summary, Carielli cites NIST deprecation milestones beginning in 2030 and full disallowance by 2035. The post recommends inventorying where asymmetric cryptography is used, asking IAM and cloud vendors for roadmaps, prioritizing network and identity upgrades, and assessing third-party readiness.
The quantum-security posts extend the coordination argument to procurement: organizations need to understand vendors’ plans and the operational consequences, not simply accept assurances.
Read more
Carielli’s summary points readers toward concrete questions and potential red flags, making vendor readiness part of the migration plan.
A post about a Forrester report lists questions on vendors’ roadmaps, current posture, crypto agility, operational impact, and third-party risk. It says the report explains what to look for in answers and which responses may be red flags.
Use breach and enforcement data to find neglected risks
Carielli highlights analysis that turns large incident and penalty sets into patterns security leaders can examine.
Read more
The post focuses not just on the scale of the numbers, but also on recurring sources of exposure—including supply chains, connections between SaaS services, and privileged insiders—that may merit closer scrutiny.
The summary of an annual report gives figures for the top 35 breaches and top 35 privacy enforcement actions, then names software supply chain, ransomware, SaaS-to-SaaS exposure, and privileged insiders among the drivers examined.
Treat application security and AI-related risks as connected concerns
A Security & Risk Summit post places application-security platforms alongside software supply-chain risk, AI-generated code, and AI red teaming, presenting application security in the broader landscape of development and emerging AI risks.
Read more
Carielli promotes a summit track covering all four areas and invites readers to attend in Austin.
This is the clearest statement of the argument running through Sandra Carielli’s quantum-security work: post-quantum migration is an enterprise coordination problem, not a security-department project.
Read more
It also names specific first moves a brand could build a session around.
This post summarizes a Forrester report on preparing for Q-Day.
It cites two dates as reasons to act: NIST deprecations begin in 2030 and full disallowance arrives by 2035, making a wait-and-see position untenable.
It lists the functions that own parts of the migration — security, infrastructure, development, risk, innovation and procurement — and recommends concrete first steps: inventory where asymmetric cryptography lives, press IAM and cloud vendors for post-quantum roadmaps, prioritize network and identity upgrades, and assess third-party readiness.
It credits a long list of co-authors, a colleague who coordinated the process and another who provided editorial guidance.
For brands planning a campaign
A vendor selling post-quantum migration can skip security-only framing. A co-produced session or report built around the six functions and the inventory-to-vendor-SLA sequence would match an argument this audience already hears from Forrester.
The practical counterpart to the coordination argument: a step-by-step roadmap from assessing cryptographic dependencies to planning migration.
Read more
Open it to see how the research is packaged for practitioners.
Announces a report by Sandra Carielli, Heidi Shey and Andras Cser that sets out a roadmap for security and risk leaders preparing for the post-quantum era.
The post frames the work as actionable — what to do starting now — and credits an editorial director, a research associate who coordinated dozens of interviews and moved the report through production, and Martha Bennett for guidance.
The interview credits signal that the research involved interviews, not just desk analysis.
For brands planning a campaign
A four-step structure translates easily into a workshop or assessment template. A sponsor could underwrite a practitioner session that walks attendees through the steps rather than presenting a product.
The most directly reusable item for a procurement or vendor-management audience, showing how Sandra Carielli’s quantum work reaches beyond security teams into buying decisions.
Read more
Describes a Forrester report co-authored with Alla Valente, Heidi Shey and Andras Cser on what security leaders and procurement counterparts should ask technology vendors about their quantum security readiness.
The question areas are roadmap, current posture, crypto agility, operational impact and third-party risk.
The post says the report supplies the questions, what to look for in an answer and potential red flags.
Ask for the report before relying on the question list, which the post summarizes.
For brands planning a campaign
A vendor confident in its roadmap could be tested against this questionnaire in a public session or supply the buyer-side checklist for a procurement audience. The format suits vendors willing to be examined, not a straightforward product pitch.
Shows the other half of this research range — breaches and privacy enforcement — and how the work handles large data sets.
Read more
Open it for a subject beyond quantum security.
Summarizes a Forrester report on the year's biggest breaches and privacy abuses.
The headline figures are 10.6 billion records exposed across the top 35 breaches and nearly $2.8 billion in privacy penalties across the top 35 enforcement actions.
It names four drivers: software supply chain, ransomware, SaaS-to-SaaS exposure, and insiders with privileged access that receives insufficient scrutiny.
Carielli calls the work one of their favorite Security & Risk reports each year for its analytical deep dive.
The post credits co-leads, co-authors, an editor and the colleague who collected and analyzed the breach and fine data.
For brands planning a campaign
Published breach and penalty numbers give a security vendor a concrete, newsworthy hook. An annual data review can sustain a recurring collaboration rather than a single sponsored post.
Shows how Sandra Carielli reaches security and risk leaders: a live, multi-analyst discussion of one enterprise problem rather than a single-voice webinar.
Read more
Useful for judging how a vendor could fit into that room.
Announces a March 16 live discussion for Forrester clients, with Brent Ellis, Martha Bennett, Alla Valente, Jeffrey Rajamani and David Mooter joining Sandra Carielli.
The agenda covers why quantum timelines are accelerating, who needs to be involved and why siloed planning fails, and how leaders coordinate an enterprise-wide cryptography migration.
The session targets people responsible for security, technology strategy or risk governance and is positioned as a way to pressure-test readiness and align teams early.
For brands planning a campaign
For a vendor, the model is multiple analysts, one enterprise coordination problem and an explicit readiness test for attendees — a different proposition from a single-sponsor product presentation.
A quick look at the third area covered publicly — application security — and the conference context a partner would enter.
Read more
Promotes a track at Forrester's Security & Risk Summit devoted to application security. Topics include application security platforms, the software supply chain, the risks of AI-generated code and AI red teaming, with an invitation to attend in Austin.
For brands planning a campaign
AI-generated code and AI red teaming are the two themes most likely to draw an audience beyond dedicated application-security buyers. Build content around those beats rather than generic platform messaging.
Post-quantum migration as a cross-functional program3
In-person presence at government and industry security events3
What to ask technology vendors about quantum readiness2
Breach and privacy enforcement analysis backed by counted data1
Application security and AI-driven risk in event programming1
Post-quantum migration as a cross-functional program
Many of these posts promote Forrester research arguing that quantum security is an enterprise effort, not just a security-team project.
Read more
They cite NIST deprecation dates beginning in 2030 and full disallowance by 2035 to argue that "wait and see" is no longer viable, and name the functions responsible for parts of the migration: security, infrastructure, development, risk, innovation, and procurement. Recommended first steps include inventorying where asymmetric cryptography lives, pressing IAM and cloud vendors for post-quantum roadmaps, prioritizing network and identity upgrades, and assessing third-party readiness.
Research reports and a client live session developed with named collaborators across Forrester's security and risk team. The posts credit co-authors, a research director, an editor, and a research associate, showing the work is produced as team research rather than single-author commentary.
For brands planning a campaign
Useful for a vendor whose buyers are security and risk leaders still scoping post-quantum work: Carielli addresses the coordination challenge and sequencing of early migration steps. That makes this a fit for a report or webinar on aligning departments, rather than a technical deep dive on algorithms.
What to ask technology vendors about quantum readiness
One post focuses on procurement: questions security leaders and procurement counterparts should ask technology vendors about their post-quantum readiness.
Read more
Topics include roadmap, current posture, crypto agility, operational impact, and third-party risk, along with guidance on what good responses look like and which answers are red flags. This complements Carielli's broader point that vendor SLAs and contract updates belong in the migration plan.
A Forrester report paired with a public blog summary for non-clients.
For brands planning a campaign
Gives a vendor a ready-made angle for content aimed at buyers who must justify third-party risk decisions internally—for example, a joint asset on vendor questionnaires, contract language, or how to score a supplier's post-quantum roadmap.
Breach and privacy enforcement analysis backed by counted data
Carielli's annual report on the year's biggest breaches and privacy abuses leads with hard numbers: 10.6 billion records exposed across the top 35 breaches and nearly $2.8 billion in privacy penalties across the top 35 enforcement actions.
Read more
The analysis attributes the largest incidents to software supply chain, ransomware, SaaS-to-SaaS exposure, and insiders with privileged access that gets too little scrutiny. Carielli calls it one of their favorite reports, citing the depth of the data work.
Report co-led with another analyst, with named co-authors, an editor, and a research associate credited for collecting and analyzing breach and penalty data.
For brands planning a campaign
A strong hook for a vendor selling data security, insider risk, or supply chain controls to security leaders: breach trends and penalty figures provide a concrete numeric frame for why a particular control matters, while the annual cadence offers a recurring collaboration opportunity.
Application security and AI-driven risk in event programming
Carielli promotes a full application security track at Forrester's Security & Risk Summit, covering application security platforms, the software supply chain, risks of AI-generated code, and AI red teaming.
Read more
The post shows Carielli's connection to the conference program as well as the research, and names the topic clusters security professionals are being asked to plan around.
For brands planning a campaign
Relevant to a vendor interested in event-linked campaigns as well as written content; it signals that AI-generated code risk and AI red teaming are live buyer concerns in Carielli's circle.
In-person presence at government and industry security events
Several posts cover events where security buyers gather, including the 17th Annual Billington CyberSecurity Summit in Washington, D.C., where Forrester was a Bronze Sponsor and the team staffed Booth 110.
Read more
Carielli invited attendees to find them at sessions and, in an advance post, asked who else would be there to arrange time to meet.
These posts focus on event logistics and community connections, showing where Carielli appears and how they engage with attendees.
For brands planning a campaign
Points to conference and field-marketing options—booth presence, session hosting, and scheduled meetings with security and government audiences—as an alternative or complement to a research-report collaboration.
Sandra Carielli’s posts describe collaborative cybersecurity research published through Forrester on quantum security, vendor readiness, and breaches and privacy abuses.
Read more
Ask whether a separate commercial relationship applies.
Forrester
Mention
Carielli describes co-leading or contributing to Forrester research on data breaches and privacy abuses, quantum-security planning, and questions security leaders can ask technology vendors.
Read more
Ask whether any sponsorship, affiliate, or client relationship applies.
The larger is post-quantum security: summaries of research reports and a client session arguing that quantum migration is a cross-functional program; that NIST deprecation milestones beginning in 2030 and full disallowance by 2035 rule out a wait-and-see stance; and that security leaders and procurement counterparts should press IAM, cloud, and other vendors on roadmaps, crypto agility, operational impact, and third-party risk.
The smaller thread covers counted breach and privacy enforcement — 10.6 billion records exposed across the top 35 breaches of a year and nearly $2.8 billion in privacy penalties across the top 35 enforcement actions — plus a Security & Risk Summit track on application security platforms, software supply-chain risk, AI-generated code, and AI red teaming.
Start with the quantum report posts and vendor-question post, then read the breach analysis for the wider risk picture.
Several posts cover event logistics for the Billington CyberSecurity Summit and Forrester's Security & Risk Summit, showing where Carielli appears and which buyers gather there.
Posts on the same problem: U.S. federal momentum on post-quantum security after Executive Order 14412, the G7 and CISA call to start preparing now, and practical fundamentals such as discovering where cryptography is used, maintaining a cryptographic inventory, and producing machine-readable CBOMs to map dependencies.
Read more
Both treat the shift from awareness to funded execution as the field’s current state.
Volkow writes from a vendor and practitioner vantage on federal and critical-infrastructure execution, naming the tooling and inventory work while addressing gaps in budgets, sector timelines, and production-ready validated products. Carielli summarizes team analyst research for enterprise security and risk leaders, focusing on cross-functional ownership and questions buyers should put to their vendors.
Also focuses on the governance side of quantum risk rather than the physics: cryptographic inventory, whether crypto agility has actually been demonstrated, and how to make quantum exposure reviewable by boards and auditors.
Read more
Both frame the deadline around how long data must stay confidential, not predictions of when a quantum computer will arrive.
Nielson advances a named framework, QCI-QS1, with a risk score and defined evidence requirements, and convenes a single-room State of Quantum Readiness Summit for cybersecurity, audit, standards, and risk professionals. Carielli offers no framework of their own; instead, the guidance comes through summaries of co-authored research reports and a vendor-question list for enterprise security and risk teams, rather than the audit-and-standards audience.
Covers post-quantum migration industry by industry — banking, healthcare, critical infrastructure, national security — and makes the same core case: crypto agility, not a one-time algorithm swap, is the real work.
Read more
Both stress that exposure sits in third-party platforms, HSMs, payment systems, and software libraries, not only in systems a company owns.
Challa writes from an implementation and resilience angle, laying out a discovery-to-migration-orchestration sequence and treating each new mandate or task force as a signal about operational resilience. Carielli focuses more on research synthesis and buyer guidance, pairing the quantum thread with counted breach and privacy enforcement analysis that Challa does not cover.
Sandra Carielli’s LinkedIn posts answer one narrow question: whether they reach a plausible enterprise security audience.
Read more
They do not show how many followers control security budgets or how a post-quantum topic would perform.
Their LinkedIn account showed 3,388 followers on October 9, 2026.
The posts target security and risk leaders—Forrester clients, CISOs, and procurement teams—rather than a broad technology audience.
One addresses security leaders and their procurement counterparts directly on vendor quantum-readiness questions; another frames quantum security as a cross-functional leadership challenge spanning security, infrastructure, development, risk, and procurement, and names a live session for that audience.
Two further posts cover the largest data breaches and privacy enforcement actions of 2025 and a Security & Risk Summit application-security track.
The topics fit a campaign aimed at post-quantum migration, but the size and seniority of the audience behind the follower count are unverified.
Before committing budget, ask for recent post-level results on quantum or cryptography topics—impressions, engagement, and any registration or download conversions from comparable vendor-focused sessions—and an audience survey or subscriber list showing job role, seniority, and geography.
Sandra Carielli's posts document no personal sponsorship or partnership formats.
Read more
They feature Forrester research reports, analyst-run client webinars, and conference attendance—not creator-style brand deals.
Carielli co-authors Forrester reports with named colleagues, including Heidi Shey, Andras Cser, Enza Iannopollo, and Alla Valente; promotes client sessions and registration; and appears at Forrester's Security & Risk Summit and the Billington CyberSecurity Summit, where Forrester was a Bronze sponsor.
This points to a distribution model built around Forrester's research, client engagement, and event platforms rather than an individual sponsorship menu.
Ask Forrester directly whether it offers a collaboration path; the posts publish no deliverables, terms, pricing, or inquiry route.
Conditional fit. The subject is a direct match, but the collaboration would need to be negotiated as Forrester research or client-session work, not bought as an individual creator sponsorship. Confirm with Forrester that a vendor-sponsored session or co-produced asset is possible before committing budget.
Read more
Brief
A cybersecurity vendor selling post-quantum migration services wants to reach security and risk leaders preparing for post-quantum migration through a research-backed webinar or report collaboration, not a paid social post.
Reasons
The posts make the exact argument the brief rests on. The report summary on preparing for Q-Day cites NIST deprecation dates beginning in 2030 and full disallowance by 2035, and argues that waiting is no longer an option. The vendor can build on that premise rather than introduce it.
The post’s recommended starting moves could anchor a practical session: inventory where asymmetric cryptography lives, press identity and cloud vendors for post-quantum roadmaps, prioritize network and identity upgrades, and assess third-party readiness. Those are four working segments for a webinar or workshop, not vague themes.
There is also a buyer-side angle suited to a vendor willing to be examined rather than praised. The vendor-questionnaire report covers roadmap, current posture, crypto agility, operational impact and third-party risk. It explains what a good answer looks like and which answers raise red flags, giving the vendor a chance to offer its own roadmap as a worked example.
The posts describe a live, multi-analyst discussion of an enterprise problem: quantum timelines, who must be involved, why siloed planning fails and how to coordinate an enterprise-wide migration. It is aimed at people responsible for security, technology strategy or risk governance. A vendor could join as sponsor and answer the readiness questions.
The audience evidence points in the right direction, though narrowly. The posts are written for Forrester clients, security leaders and procurement counterparts, and the LinkedIn account showed 3,388 followers on October 9, 2026. That suggests a plausible enterprise security audience, not a mass-market one.
The posts show no personal sponsorship or partnership formats, rate card, deliverable list or inquiry route. They describe research reports, client sessions and conference attendance, pointing to a route through Forrester rather than a standalone creator deal. Audience size and seniority are also supported only by a follower count; ask for impressions, engagement and registration or download results from comparable quantum or cryptography content, plus role and seniority data if available.
When to choose a specialist
Poor fit based on the posts. This is not a judgment about capability; the posts simply do not show this kind of work or the personal sponsorship model the campaign assumes.
Read more
Brief
A developer-tools company wants an independent creator to publish a hands-on build-along tutorial for software engineers, with working code, a public repository and a video walkthrough, promoted on the creator’s own channels and measured by tutorial completions.
Reasons
The posts feature analyst research summaries, a client session announcement and conference attendance notes. None shows a technical walkthrough, code sample, repository, demonstration environment or video tutorial, making a build-along format a new and unproven direction.
The audience evidence does not support the brief. The only audience data available is a follower count of 3,388, with no breakdown by job role, seniority or geography. That is not enough to assess a brief targeting practising engineers; the posts instead address security leaders, risk governance and procurement.
The brief assumes a personal sponsorship model with a rate card, publishing on the creator’s own channels and completion tracking. The posts describe research reports, client sessions and event booths, but show no rate card, media kit, sponsorship policy or inquiry route. The buying mechanism would need to be established, not assumed.
A written or recorded explainer for security and risk leaders is a better-supported ask than a developer tutorial. If the vendor’s goal is engineering adoption, the posts point instead to reaching the people who set requirements and assess vendors—a different objective.
A worked campaign example
Reusable asset
Turn the same five question areas into a fillable vendor-readiness questionnaire attendees can send to their suppliers, with columns for the question, the answer received and the red flag to watch for. The posts describe these components, so this packages research the audience already hears rather than introducing a new claim. Include the vendor’s completed answers as one worked example alongside the blank form.
Session design
Run a 45 to 60 minute live session on the theme that post-quantum migration is a cross-functional program, not a security-department project. Open with the timeline pressure cited in the posts: NIST deprecations beginning in 2030 and full disallowance by 2035. Then devote one segment to each of the four starting moves: inventorying where asymmetric cryptography lives, pressing identity and cloud vendors for roadmaps, prioritizing network and identity upgrades, and assessing third-party readiness. Close with the vendor-questionnaire material as the practical takeaway.
Setup
The goal is to reach security and risk leaders preparing for post-quantum migration on behalf of a post-quantum migration vendor. Build the collaboration as one live session plus one reusable asset, following the multi-analyst live discussion format described in the posts.
Title
A sponsored Q-Day readiness clinic built around the vendor questionnaire
Vendor role
The vendor is the supplier under examination, not the presenter of a pitch. During the third-party readiness segment, it answers the five question areas from the questionnaire report—roadmap, current posture, crypto agility, operational impact and third-party risk—while the host tests its answers against the red flags described in the research. This works only for a vendor confident in its roadmap; one that cannot answer openly should not take the slot.
What to confirm
Confirm whether a vendor-sponsored session of this kind is available and on what terms. The posts show no personal partnership formats, rates or inquiry route, so settle this directly with Forrester rather than assuming a creator sponsorship.
Confirm whether the vendor will publish its own quantum readiness answers; the format depends on being examined rather than promoted.
Ask for post-level performance on comparable quantum or cryptography content—impressions, engagement and any registration or download conversions—as well as audience details on job role and seniority. The available audience evidence is a follower count of 3,388 recorded on October 9, 2026, which is not enough to forecast registrations.
Confirm whether the questionnaire can be distributed as a standalone download. The posts show no download or conversion asset; if downloads cannot be tracked, agree on another measure before launch.
Why it fits
Every element maps to the posts: the timeline argument, cross-functional framing, four first steps, vendor question list and live multi-analyst session format. Nothing depends on capabilities the posts do not show.
Consider this alternative if the campaign targets federal cyber leaders moving from a post-quantum mandate to funded execution.
Read more
In a post about Executive Order 14412, the account describes gaps in funding, critical-infrastructure guidance, production-ready tools and action against “harvest now, decrypt later” risk.
A second post turns readiness into practical steps: cryptographic inventory, a machine-readable CBOM, risk assessment, governance and a migration roadmap.
Those examples support a webinar or report on federal implementation more directly than Sandra Carielli’s broader cross-functional enterprise framing.
The posts focus on federal policy and execution, making this a less direct fit for a general enterprise session on vendor questions and coordination across security, infrastructure, development, risk and procurement. Ask for confirmation of the account’s identity and commercial availability.
Consider this alternative if the buyer wants a board- and audit-facing campaign that makes quantum risk measurable.
Read more
One post ties urgency to data-retention periods and lays out an inventory, risk-scoring and governance approach; another describes a summit intended to help participants determine what to inventory, measure, evidence and govern. This is a closer fit for a session on risk evidence and board reporting than Sandra Carielli’s vendor-readiness and cross-team migration angle.
The posts present a specific framework and summit, but do not establish how the framework is independently validated or whether vendor collaboration is available.
The approach is more governance- and measurement-led, with less emphasis on the multi-analyst client-session format and vendor-question guidance described in Carielli’s posts.
Ask for confirmation of the account’s identity and commercial availability.
Consider this alternative if the campaign needs to explain how post-quantum migration affects particular industries and interconnected technology.
Read more
One post discusses modernization across banking, healthcare and critical infrastructure, emphasizing operational disruption and crypto agility; another traces dependencies through vendors, payment systems, APIs, software libraries and other third parties. That makes the account’s evidenced angle useful for a campaign about migration dependencies and resilience across an ecosystem.
The posts support an industry and systems-dependency angle, but do not show the vendor-questionnaire or live multi-analyst session format found in Carielli’s posts. Ask for confirmation of the account’s identity and commercial availability.
This page covers nine posts published by Sandra Carielli's LinkedIn account, retrieved on October 9, 2026, together with six posts from three comparison creators (Ben Volkow, Bryant D Nielson, and Chaitanya Challa) dated June through October 2026.
The posts cover Forrester reports on preparing for Q-Day, the questions security leaders and procurement teams should ask technology vendors about quantum readiness, and the four steps to quantum security; an annual report on the largest data breaches and privacy abuses; an application security track at Forrester's Security & Risk Summit; and attendance at the Billington CyberSecurity Summit and the Security & Risk Summit.
Carielli's posts do not give reliable publication dates, so no dated trend line is claimed.
They name a March 16 client session, September 8–10 summit dates, and NIST deprecation milestones of 2030 and 2035.
The posts do not include the bodies of the underlying research reports, the blog posts and event pages they link to, interview transcripts, or session recordings, so statements about research findings rest on the post text alone.
No personal rate card, sponsorship policy, or inquiry route appears in the posts here, and audience information is limited to a displayed follower count of 3,388 recorded on October 9, 2026.
The posts here do not identify signature books, shows, or earlier work, so those parts of Carielli's public identity remain unconfirmed.