Deciding who can reach what

Selected work demonstrating this service.

• Improved team communication and collaboration

  Improved team communication and collaboration by implementing Slack, Mattermost, 1Password, and Jira, saving 8,000 hours of labor.

• Automated team collaboration

  Automated team collaboration, password management, task and time management, and built a semi‑automatic project‑showcase system, raising team productivity.

• Built Stripe and in‑app purchase entitlements

  Built the payments and entitlements layer — Stripe alongside Apple and Google in‑app purchase — gating the directory, search and export through an 11‑table access model checked on the server.

• Built company ownership claims and adjudication

  Built company ownership claims end to end — a user claims a company, an administrator adjudicates, and an approval rewrites the authorization graph that decides who is allowed to edit what.

• Ran a continuous security scanning programme

  Established a continuous security programme — code scanning, DAST, dependency and vulnerability checks, SBOM generation, secret scanning and SHA‑pinned actions — alongside 21 written security audits.

• Wrote a scope rule after a credential leak

  Wrote a scope rule into the repository after a restructure carried another company's inventory, firewall allowances and prose into it — and kept the quarantined residue under the secret scanner rather than excluding it.