defense-in-depth

Trace import graph + test coverage of files about to be modified and produce an impact report before any code changes are made.

Evaluate the quality of a DSPy integration in DiD — endpoint correctness, graceful degradation, and WARN-NOT-BLOCK contract.

Design, implement, and debug GitHub Actions workflows for DiD's server-side enforcement layer.

The canonical skill for designing, implementing, testing, and registering a new Guard in defense-in-depth.

Review a PR against DiD's governance contracts — Guard purity, severity correctness, test coverage, and documentation completeness.

Refactor guard code with minimum blast radius — change only what is needed, verify nothing else shifts.

Design adversarial test suites for Guards that prove both positive enforcement and bypass resistance.

Design the threat coverage for a new Guard by thinking like an adversary first.

5-phase onboarding wizard for AI agents entering a defense-in-depth project. Self-identify, discover rules, scaffold artifacts, learn to contribute, verify setup.

Multi-branch creation skill for scaffolding new skills, rules, and workflows/procedures. Ensures all created artifacts comply with project standards from day one.

Structured research workflow for answering complex questions, evaluating technologies, and cross-checking information across multiple sources. Turns curiosity into verified, actionable intelligence.

Post-task reflection protocol for extracting lessons, identifying gaps, promoting knowledge, and driving system growth. Turns ephemeral experience into permanent wisdom.