I remember seeing you mention a draft of an DNSSEC "jeremiad", but I never saw the final product. A quick Google search doesn't find it. Has it been made available to a wider audience yet?
No, not yet. It's 7000 words long (I cover a lot of detail, including stuff from pre-DNSSECter and pre-DNSSECbis, and a lot of it doesn't really need to be there). I'll post it someday soonish.