Supply Chain Firewall — block compromised packages, close the Ghost Gap, cure infections. Zero dependencies.

SPIFFE-style workload identity broker for AI agents. Short-lived JWT-SVIDs, audience binding, zero long-lived API keys. Zero-trust identity layer for agent fleets.

Automated credential rotator for MongoDB Atlas users tied to GCP Cloud Run Services and Jobs. Uses Terraform + Python to dynamically create per-service database users with strong random passwords and output secure connection strings.

Automated remediation of pod failures after credential rotations — K8s monitoring agents, ServiceNow approval workflow, and orchestrated pod restart

HashiCorp Vault Solace Plugin

AWS incident simulation documenting recovery from loss of MFA access after offboarding failure. Covers IAM investigation, CLI recovery, internal verification, RCA, and preventive measures — based on SME experience in AWS account security.

Ops-heavy automation for secret rotation windows, owner prompts, and stale-secret detection across enterprise credential stores. Practical SRE tooling for credential hygiene.