Check software quality, accessibility, release gates and security boundaries before launch.
Check software quality, accessibility, release gates and security boundaries before launch.
Start with the selected guides, then browse the complete collection by decision type. The directory includes older published articles as well as recent additions; use the archive below for search and chronological browsing.
Browse by the decision you need to make. Every published guide in this collection is linked here; the chronological archive follows below.
Showing 1–12 of 37 posts
Use this agentic AI governance checklist to control delegated authority, identity, tool permissions, costs, audit trails, OWASP/NIST evidence gates, and human approval.
Use this vibe coding security checklist to review AI-generated code, agent permissions, secrets, dependencies, tests, review evidence, approvals, and rollback before production.
Use this confidential computing for AI applications checklist to evaluate data-in-use risk, TEEs, attestation, cloud architecture, platform fit, tradeoffs, and private AI rollout.
Use this AI agent skill security checklist to review reusable agent skills, permission manifests, sandboxing, provenance, audit logs, semantic scanning, and incident response before production use.
Use this software supply chain security checklist to manage SBOMs, dependency risk, vendor evidence, build provenance, AI components, incident drills, and recovery readiness.
Use this regulated application migration checklist to preserve security controls, compliance mapping, audit evidence, rollback readiness, cutover proof, and hypercare monitoring.
Plan an agentic SOC rollout with telemetry, triage agents, investigation workflows, human approval gates, playbooks, audit logs, and metrics.
A practical AI CVE remediation framework for prioritizing vulnerabilities, preserving human approval, testing patch risk, and shipping fixes safely.
Build an AI vulnerability management workflow that ranks CVEs with CVSS v4, EPSS, KEV, SSVC-style actions, asset context, human review, DevSecOps gates, and audit evidence.
Plan a 2026 software QA budget by release risk, manual testing, automation ROI, AI-assisted QA, performance, security, release evidence, and governance.
Build a synthetic test data strategy for regulated software with privacy controls, leakage checks, generation methods, coverage proof, release evidence, and QA governance.
Use this 2026 AI agent identity governance checklist to manage non-human identities, scoped credentials, delegated authorization, guardrails, audit logs, and incident response.
