Business & Operations

Map technical measures to DORA, VAIT or BAIT migration needs, ISO 27001, BSI, internal policies, or MaRisk review expectations.

Review Dockerfiles, base images, user rights, capabilities, SBOM, image signing, distroless or slim images, CVEs, and runtime hardening.

Review governance controls such as CODEOWNERS, branch protection, approvals, auditability, and policy compliance.

Review SAP (member) using its official documentation and repository in the CNCF Members / Platinum category. As a global leader in enterprise applications and business AI, SAP stands at the nexus of business and technology. For over 50 years, organizations have trusted SAP to bring out their best by uniting business-critical operations spanning finance, procurement, HR, supply chain, and customer experience.

Review cloud accounts or subscriptions, networks, IAM, logging, policies, baselines, guardrails, encryption, tagging, and tenant separation.

Review cloud naming, tags, ownership, cost centers, allowed services, regions, data classification, policy enforcement, and audit evidence.

Review restore tests, RPO/RTO, data integrity, backup protection, recoverability, and disaster recovery.

Review automated repair actions for safe limits, dry runs, approval modes, rollback, audit logs, blast radius, and loop protection.

Link requirements, controls, implementation, tests, tickets, and evidence into an auditable trace.

Review evidence, approvals, tickets, logs, test protocols, risk decisions, versioning, and accountable owners.

Create and maintain ADRs with context, decisions, alternatives, risks, security impact, compliance relation, and review points.

Review REST, GraphQL, OpenAPI, and gRPC contracts, breaking changes, versioning, AuthN/AuthZ, error formats, and compatibility.

Review Angular components, signals, RxJS, forms, routing, state, accessibility, testing, and bundle performance.

Review alerts for actionability, clear symptoms, runbook links, severity, ownership, SLO relation, deduplication, escalation, and remediation suitability.

Assess correlation of logs, metrics, traces, events, and incidents to reduce noise, improve root-cause analysis, and lower alert fatigue.

Review AI-assisted changes before execution for automation boundaries, human approval, affected-system criticality, and audit evidence.

Compare declared agent contracts with independent runtime enforcement across tools, files, processes, networks, secrets, approvals, and limits.

Design and review Adyen Checkout, merchant references, idempotency, HMAC webhooks, asynchronous results, modifications, and tests.

Systematically hunt for every variant of a discovered vulnerability across the entire codebase. Use when a bug is found and all instances of the same root cause pattern must be identified, or when performing variant analysis during competitive audits on Code4rena or Sherlock.

Use when the user wants to audit TON smart contracts for security vulnerabilities, scan FunC or Tact contracts for message chain replay, bounce handling, or gas issues, review TON DeFi protocols for actor-model concurrency flaws, or analyze asynchronous message passing security.

Use when auditing Solana programs for security vulnerabilities, reviewing Anchor or Pinocchio/native Rust smart contracts, checking CPI safety, PDA validation, account ownership, signer verification, or Token-2022 security.

Draft, revise, teach, or audit expository prose using Pinker's cognitive approach to style: classic presentation, reader modeling, curse-of-knowledge repair, coherent information order, deliberate syntax, evidence-based usage, feedback, and revision. Use when the user explicitly requests Pinker's writing approach, invokes this skill, or asks for a Pinker-grounded draft, edit, style lesson, or prose diagnosis. Apply principles without imitating Steven Pinker's distinctive voice.

Design, deliver, or audit explanations and lessons with a Pinker-informed focus on phenomena, the curse of knowledge, concrete models, active reasoning, feedback, and revision. Use when the user explicitly requests Pinker's approach to teaching, invokes this skill, wants a difficult idea explained to a specified audience, or asks for a lesson, tutoring sequence, course segment, or teaching audit grounded in his work. Describe this as Pinker-informed teaching, not as a validated pedagogy creat...

The monthly financial close for the Zynkr Finance Ledger — reconciles one month's 台北富邦 bank statement against Gmail receipts, appends the rows that are missing, files the statement, and mails a performance report. Give it the statement PDF and a month; it reads every line on the statement as the spine of the month, sweeps the Finance Gmail label for invoices, receipts and remittance notices, works out which of them are already in the ledger, and proves the month is complete with a balance ide...