DevOps

Prove that every acceptance criterion (AC-<n>) in a plan.md has at least one passing test and that no test mapped to a criterion failed, by reading JUnit XML…

Structure, draft, validate, and track the Architect's decision records (docs/decisions/NNNN-slug.md) and escalations with a default date.

Search, bind, validate, and certify entries of the Forge, the catalog of certified reusable building blocks (shared services, libraries, templates, interface…

Maintain and validate the Learn hypothesis ledger (specs/learn/hypotheses.md): add Open hypotheses, list reviews and feature deletions that are due, compute a…

Author and validate incident records (docs/incidents/<date>-<slug>.md): detect, mitigate first, diagnose with correlated evidence, repair with a failing test…

Structure, validate, and hand off persistent Meeting Packs from client meeting transcripts: normalize a plain-text transcript, build a pack (summary…

Structure, author, and validate the migration documentation set (assessment.md, migration-plan.md, runbook.md) for moving an application from one…

Gate a change on its Mutation Testing Bar: read a Stryker mutation-testing-elements JSON (or a generic killed/survived summary), compute the mutation score…

Scaffold a working GitHub Pages website from a vetted template and wire it to deploy automatically.

Babysit a GitHub pull request through CI and review closure.

Send Telegram Bot notifications for development events, CI/CD pipeline status, and AGENTS.md progress updates.

gh for PR state, discussions, CI diagnosis, replies, and nontrivial GitHub commands; fix-pr invokes it.

(💛) Create and manage AI agents using Google's Agent Development Kit (ADK) for Python.

Package an Express and Prisma API as a runtime-only image that migrates its Postgres database at start.

Use when installing, resuming or repairing a repository's Docker Compose Hermes Agent, including a silent bot, stopped gateway, pending activation, or…

Package a Next.js app as a runtime-only container image with a health probe and a fast shutdown.

Install host operations on a VPS, with a cron health check that alerts on change, restore-verified encrypted database backups, and an installer.

Convert Azure ARM templates to Terraform HCL configuration with full resource mapping and dependency preservation

Diagnose and fix failing GitHub Actions PR checks with gh.

Systematically evaluate cyber-campaign evidence to attribute an operation to a threat actor, using the Diamond Model and Analysis of Competing Hypotheses…

Analyzes malware C2 communication over HTTP, HTTPS, DNS, and custom protocols to reverse-engineer beacon patterns, command structures, data encoding, and…

Parses Kubernetes API server audit logs (JSON lines) to detect exec-into-pod, secret access, RBAC modifications, privileged pod creation, and anonymous API…

Analyze malicious Linux ELF binaries — botnets, cryptominers, ransomware, and rootkits targeting Linux servers, containers, and cloud infrastructure — through…

Finds over-permissive RBAC roles and service-account token abuse paths in a Kubernetes cluster using kubectl auth can-i, rbac-police, kubectl-who-can, and…