Harden a CI/CD pipeline against Poisoned Pipeline Execution (PPE / CICD-SEC-4).
Detect and prevent self-hosted CI runner abuse (CICD-SEC-7).
Minimize the admission of containers wishing to share the host network namespace (Automated)
Risk-paranoid interrogation of any plan that touches data, compliance, or production access.
Secure Clari API tokens and implement data handling best practices.
Generate the acceptance evidence a behavior module with ClarityKit artifacts needs — a transition-coverage checklist from the behavior…
Guides authentication and session security for classic CodeIgniter 2.x/3.x applications - session/cookie design, CSRF, and object-level…
Hardens Claude Code environments using a three-layer defense system to prevent prompt injection and secret leakage.
Verifies the authenticity and version of Claude models to detect proxies, wrappers, or downgraded AI versions.
Implement credit spending limits, data privacy enforcement, and input
Troubleshoot common Clerk errors and issues.
Implement user sign-up and sign-in flows with Clerk.
Handle user data, privacy, and GDPR compliance with Clerk.
Migrate from other authentication providers to Clerk.
Reference architecture patterns for Clerk authentication.
Common Clerk SDK patterns and best practices.
Inspect audit logs, manage access policies, view telemetry data, and review request history from the CLI.
Expert UX evaluator for CLIs, terminal tools, and developer APIs.
Trace every user-facing button/touchpoint through its full state change sequence to find bugs where functions individually work but cancel…
Run ClickHouse integration tests in CI with GitHub Actions and Docker containers.
The non-negotiable hard gates of a clinical EHR-automation workflow, each paired with the real incident that created it.