JamesWoolfenden

Empirically determines the exact GCP IAM permission(s) a new resource/data-source type needs, using the terraform/google experiment harness in this repo, then writes the result into pike's src/mapping database and verifies pike scan reproduces it. Use when a…

pike++ — AI least-privilege layer on top of pike's deterministic permission scan. Adds Resource ARN scoping and Conditions to escalation-class actions, splits base/escalation into the two-role pattern, and validates the result against pike's own audit rules…

Work through a repository's Dependabot alerts and PRs with picard - picard supplies the facts (what ships, which advisories each PR fixes, the Dependabot setup), the skill does the judgement (is a bump safe to merge, do an advisory's preconditions hold) and…