domehahn/SQUORA-Turnen-light - Page 62

documentation-maintainer

Create and update README files, ADRs, setup guides, API docs, runbooks, and operational documentation.

dora-readiness-reviewer

Review DORA readiness for ICT risk management, resilience testing, incidents, third-party risk, roles, policies, evidence, and auditability.

evidence-package-creator

Create auditable evidence packages from tickets, pipeline results, test reports, approvals, scans, and architecture information.

fastapi-reviewer

Review FastAPI schemas, dependency injection, async paths, authentication, validation, OpenAPI, tests, and operations.

finops-reviewer

Review cloud costs, budgets, rightsizing, reserved or committed usage, anomalies, showback or chargeback, and team cost transparency.

gcp-cloud-reviewer

Review GCP organizations, projects, IAM, networking, compute, data services, observability, cost, and resilience.

gitops-operations-reviewer

Review Argo CD or Flux setups, sync policies, drift detection, promotion, rollback, app-of-apps, secrets, cluster access, and deployment governance.

golang-reviewer

Review Go code for idioms, concurrency, context propagation, errors, interfaces, modules, tests, and performance.

helm-reviewer

Review Helm charts, templates, values, dependencies, hooks, secrets, schema validation, upgrades, and rollbacks.

iac-gitops-reviewer

Review Terraform, Kubernetes, Helm, Kustomize, GitOps reconciliation, promotion, and environment safety.

ict-incident-reporting-reviewer

Review ICT incident classification, escalation, documentation, reportability, timelines, responsibilities, templates, and communication chains.

ict-risk-management-reviewer

Review ICT risks, protection needs, criticality, controls, residual risks, treatment, and recurring reassessment.

ict-third-party-risk-reviewer

Review cloud, SaaS, outsourcing, subcontractors, contracts, exit strategies, concentration risks, and DORA information-register readiness.

identity-access-reviewer

Review IAM, roles, service accounts, groups, tokens, OIDC federation, GitLab or GitHub permissions, cloud rights, and privilege-escalation paths.

incident-postmortem-assistant

Support incident analysis, timeline creation, root cause analysis, impact assessment, corrective actions, and follow-up issues.

java-reviewer

Review modern Java code, JVM behavior, concurrency, APIs, testing, performance, and maintainability.

javascript-reviewer

Review modern JavaScript for async behavior, modules, runtime correctness, security, tests, and performance.

kotlin-reviewer

Review Kotlin code for null safety, coroutines, sealed models, Java interop, Gradle configuration, and tests.

kubernetes-platform-reviewer

Review Kubernetes clusters, namespaces, RBAC, NetworkPolicies, Pod Security, admission controllers, resource limits, secrets, ingress, tenancy, and upgrades.

llmops-security-reviewer

Review GenAI workloads for prompt injection, tool permissions, data exfiltration, RAG sources, sensitive prompt logging, evals, guardrails, and model access.

migration-change-reviewer

Review database migrations, schema changes, breaking changes, rollback ability, backward compatibility, and zero-downtime deployments.

mlops-governance-reviewer

Review model versioning, training data, bias, drift, monitoring, approvals, reproducibility, model registry, and deployment gates.

nextjs-reviewer

Review Next.js routing, Server and Client Components, caching, data fetching, security, deployment, and performance.

nodejs-reviewer

Review Node.js services for event-loop safety, async behavior, modules, streams, HTTP security, dependencies, and operations.

observability-reviewer

Review logging, metrics, tracing, health checks, alerts, dashboards, runbooks, and operational readiness.

opentofu-reviewer

Review OpenTofu modules, providers, plans, state, drift, lifecycle, tests, and safe apply or destroy boundaries.

operational-resilience-tester

Review backup and restore, failover, disaster recovery, restart procedures, crisis exercises, scenario tests, and lessons learned.

outsourcing-exit-strategy-reviewer

Review exit plans, data return, provider transitions, emergency operations, suboutsourcing, cloud dependencies, and business impact.

payment-compliance-reviewer

Review payment controls and evidence for PCI DSS, privacy, SCA, retention, access, auditability, outsourcing, and exceptions.

payment-flow-tester

Test authorization, capture, settlement, cancellation, refund, timeout, decline, authentication, webhook delay, and provider outage paths.

payment-fraud-risk-reviewer

Review payment fraud signals, velocity controls, risk rules, step-up actions, manual review, false positives, and feedback loops.

payment-integration-engineer

Design and implement provider-neutral payment integrations with explicit state machines, idempotency, failure recovery, and auditable order linkage.

payment-observability-reviewer

Review payment conversion, authorization, webhook, refund, reconciliation, latency, provider health, alerts, and privacy-safe telemetry.

payment-operations-agent

Support controlled capture, cancellation, refund, resend, and lookup operations with approval, limits, idempotency, and audit records.

payment-provider-migration-reviewer

Review payment-provider migrations for parity, token portability, dual processing, routing, reconciliation, rollback, and decommissioning.

payment-reconciliation-reviewer

Reconcile orders, provider transactions, fees, refunds, chargebacks, settlements, payouts, and ledger entries.

payment-security-reviewer

Review payment data flows, tokenization, credential boundaries, PCI DSS scope, authorization, sensitive logging, and checkout abuse cases.

payment-webhook-reviewer

Review payment webhooks for signature verification, replay and duplicate handling, ordering, durable processing, retries, and reconciliation.

paypal-integration-engineer

Design and review PayPal Orders and Captures, PayPal-Request-Id, OAuth boundaries, verified webhooks, refunds, and sandbox tests.

performance-scalability-reviewer

Review load behavior, bottlenecks, caching, database access, queue behavior, scaling, timeouts, and resource limits.