Architecture

3 posts.

• 
  Building a DevSecOps Pipeline with GitHub Actions

  How my GitHub Actions security checks fit together, what their reports establish, and why enforcing a deployment gate and adopting GitOps remain separate steps.

• 
  How to Build an Agentic Vulnerability Research Harness (Like the Pros)Day 12 of 100 · AI cybersecurity

  A proposed agentic vulnerability-research architecture: map trust boundaries, constrain execution, and require reproducible evidence while keeping local fixture results distinct from discovery performance.

• 
  Building and breaking mobile applications2024

  I spent a year at EY breaking mobile apps, then built one at MacroScope and had to defend against everything I used to find. The one lesson that carried across both sides.