Business & Operations

Review setup, local development, error messages, Makefiles or scripts, onboarding, tooling consistency, and practicality for teams.

Plan coding work with minimal context, relevant file selection, risk awareness, rollback, and validation strategy.

Map technical measures to DORA, VAIT or BAIT migration needs, ISO 27001, BSI, internal policies, or MaRisk review expectations.

Review Dockerfiles, base images, user rights, capabilities, SBOM, image signing, distroless or slim images, CVEs, and runtime hardening.

Review governance controls such as CODEOWNERS, branch protection, approvals, auditability, and policy compliance.

Review SAP (member) using its official documentation and repository in the CNCF Members / Platinum category. As a global leader in enterprise applications and business AI, SAP stands at the nexus of business and technology. For over 50 years, organizations have trusted SAP to bring out their best by uniting business-critical operations spanning finance, procurement, HR, supply chain, and customer experience.

Review cloud accounts or subscriptions, networks, IAM, logging, policies, baselines, guardrails, encryption, tagging, and tenant separation.

Review cloud naming, tags, ownership, cost centers, allowed services, regions, data classification, policy enforcement, and audit evidence.

Review restore tests, RPO/RTO, data integrity, backup protection, recoverability, and disaster recovery.

Review automated repair actions for safe limits, dry runs, approval modes, rollback, audit logs, blast radius, and loop protection.

Link requirements, controls, implementation, tests, tickets, and evidence into an auditable trace.

Review evidence, approvals, tickets, logs, test protocols, risk decisions, versioning, and accountable owners.

Create and maintain ADRs with context, decisions, alternatives, risks, security impact, compliance relation, and review points.

Review REST, GraphQL, OpenAPI, and gRPC contracts, breaking changes, versioning, AuthN/AuthZ, error formats, and compatibility.

Review Angular components, signals, RxJS, forms, routing, state, accessibility, testing, and bundle performance.

Review alerts for actionability, clear symptoms, runbook links, severity, ownership, SLO relation, deduplication, escalation, and remediation suitability.

Assess correlation of logs, metrics, traces, events, and incidents to reduce noise, improve root-cause analysis, and lower alert fatigue.

Review AI-assisted changes before execution for automation boundaries, human approval, affected-system criticality, and audit evidence.

Compare declared agent contracts with independent runtime enforcement across tools, files, processes, networks, secrets, approvals, and limits.

Design and review Adyen Checkout, merchant references, idempotency, HMAC webhooks, asynchronous results, modifications, and tests.

Systematically hunt for every variant of a discovered vulnerability across the entire codebase. Use when a bug is found and all instances of the same root cause pattern must be identified, or when performing variant analysis during competitive audits on Code4rena or Sherlock.

Use when the user wants to audit TON smart contracts for security vulnerabilities, scan FunC or Tact contracts for message chain replay, bounce handling, or gas issues, review TON DeFi protocols for actor-model concurrency flaws, or analyze asynchronous message passing security.

Use when auditing Solana programs for security vulnerabilities, reviewing Anchor or Pinocchio/native Rust smart contracts, checking CPI safety, PDA validation, account ownership, signer verification, or Token-2022 security.

Draft, revise, teach, or audit expository prose using Pinker's cognitive approach to style: classic presentation, reader modeling, curse-of-knowledge repair, coherent information order, deliberate syntax, evidence-based usage, feedback, and revision. Use when the user explicitly requests Pinker's writing approach, invokes this skill, or asks for a Pinker-grounded draft, edit, style lesson, or prose diagnosis. Apply principles without imitating Steven Pinker's distinctive voice.