Harden a Cloudflare Workers edge surface: authorization at the Worker boundary on every request, per-IP rate limiting, least-privilege bindings, allow-listed egress, scrubbed logs, and no secrets in code. Use when authoring or reviewing any Worker, wrangler…
Keep a project's git history enterprise-grade and audit-ready. Use on EVERY commit, branch, and PR: Conventional Commits, atomic changes, green-before-push, no secret ever committed, no rewriting published history, main/master stays deployable.
Keep an AI-agent build pipeline itself trustworthy. Defends against context/prompt-injection poisoning, tool-invocation abuse, malicious dependency suggestions, and secret exfiltration through the agent. Use every session, and whenever reading untrusted files…