Skill UI

A risk-paranoid, mandatory review process designed to interrogate any plan that touches sensitive customer data, regulatory compliance, or production access. It forces consideration of critical security pillars including STRIDE threat modeling, blast radius quantification, detection mechanisms (MTTD), incident response runbooks, regulatory notification windows, and third-party vendor security posture. Essential before deploying features handling PII, PHI, or before compliance audits (SOC 2, HIPAA, GDPR).

A comprehensive guide for securing container images and runtime environments. Covers best practices from Dockerfile authoring (minimal base images, multi-stage builds, non-root users) through advanced runtime enforcement (seccomp, AppArmor) and Kubernetes security controls. Essential for production hardening and maintaining supply chain integrity.

This guide details the architecture and implementation of a ransomware-resilient backup strategy, adhering to the extended 3-2-1-1-0 methodology. It covers critical steps including defining RPO/RTO, establishing immutable/air-gapped copies, isolating backup credentials from the production domain, and automating periodic restore testing. Use this framework to ensure business continuity against sophisticated cyberattacks.

Monitors the acceleration trend of production spending (burn rate) over defined time windows. It compares the latest spending bucket against the historical average, providing an early warning system. This is crucial for detecting sudden, unexpected cost spikes, such as a 'hot loop,' independent of overall budget limits.