Writes the release notes for the next DNN Manager release as .docs/release-notes/vX.Y.Z.md, in the structure every release uses (bold summary, Highlights, Other changes, Upgrading, Tested, link to the changelog), from the CHANGELOG.md entry, the commits since…
Software architecture analysis, design and implementation: system purpose and constraints, quality attributes (ATAM), architecture style, component boundaries, integration and API contracts, data ownership and consistency, deployment topology, resilience,…
Regulatory compliance and data protection analysis and fixes: GDPR, CCPA/CPRA, LGPD, HIPAA/HITECH, PCI DSS, SOC 2, SOX and the EU AI Act - field-level data inventory, lawful basis, purpose limitation and minimisation, notice, user rights (access, export,…
Functional correctness analysis and bug fixing: business logic against an explicit reference model, equivalence partitions, boundary values, decision tables, edge cases, state transitions, error and async paths, retries and idempotency, integration contracts,…
Code quality and maintainability analysis and refactoring: readability, code smells, complexity metrics, naming and vocabulary consistency, duplication, test quality and coverage, documentation, technical debt, dependency health and conventions. Use for…
Operational readiness analysis and implementation: structured logging, metrics and tracing, SLO-based alerting and runbooks, health endpoints, CI/CD and release strategy, rollback, infrastructure as code, configuration and secrets, least privilege, incident…
Multi-area quality review: scores a request across nine quality dimensions (security, architecture, functionality, performance, reliability, maintainability, usability, compliance, operations), runs only the specialist skills that matter for it - in parallel…
Reliability and resilience analysis and fixes: SLOs and error budgets, cascading failures, timeouts and deadline propagation, retries with backoff and jitter, circuit breakers, bulkheads, idempotency, transaction boundaries, durable multi-step workflows,…
Defensive security analysis and fixes aligned to OWASP Top 10:2025, OWASP API Top 10:2023, ASVS, WSTG, CWE Top 25, NIST SSDF and RFC 9700: threat models and attack chains, attack surface, access control (BOLA/IDOR, tenant isolation, SSRF), authentication and…
Usability, accessibility and UX analysis and fixes: user flows and consistency, cognitive load and progressive disclosure, WCAG 2.1 AA (alt text, contrast, keyboard, focus, labels, errors, semantics), error messages and feedback, API and CLI ergonomics,…
Writes and maintains a project's documentation for the people who use the application and the developers who take it over: README, user guide, docs/ folder (configuration, troubleshooting, architecture, development, database, API, testing, deployment,…
Works on the code as a long-lived product - as a senior engineer, architect, performance engineer, UX reviewer and security-minded developer at once. Use for any change to the code: building a feature, fixing a bug, refactoring, reviewing, auditing, cleaning…