TRACKS
Architecture and operating judgment for building a verifiable platform trust chain from source artifact to workload identity, policy enforcement, runtime isolation, tenant boundaries, audit evidence, and trust-degradation response.
Input validation, auth flaws, data exposure, secure defaults, and the design patterns that reduce common application risks.
Image provenance, runtime isolation, dependency trust, and the controls used to secure modern cloud software supply chains.
Cryptographic primitives, secret rotation, key hierarchy, and the operational discipline needed to use cryptography safely.
Identity boundaries, token flows, authorization models, policy engines, and the auditability of trust decisions in software systems.
Draft track for lineage, retention, deletion workflows, policy enforcement, auditability, and privacy-aware data operations.
A practical foundation for turning system diagrams, assets, trust boundaries, adversary assumptions, and abuse paths into prioritized security requirements, verifiable controls, and living threat models.
Security telemetry, investigation workflows, triage, containment, and the evidence-handling needed after active compromise.
Understand software from the outside inward: binaries, protocols, traces, decompilers, symbols, patching, and ethical analysis.
A compact, defense-oriented practice for challenging assumptions, tracing realistic attack chains across technical and human workflows, mapping attacker behavior to controls and signals, and reporting findings responsibly.