audit-methodology

The complete Chiaro methodology for SOC 2 readiness and audit. Controls, criteria, evidence standards, and every judgment call, published so you can check it.

A checklist + verification script for keeping a UK/EU SaaS on EEA-sovereign infrastructure. The exact script + methodology I run quarterly on production stacks. CC BY 4.0.

Web3 security research methodology: triage gates, invariant checks, report structure, and audit workflow notes