Security

Identity + CloudAuthentication vs authorization, tokens, service identities, shared responsibility, control vs data plane, and IAM. AIAgents, tools, MCP, prompt injection, and what an AI system can actually reach or do. AppSecDesign reviews, code scanning, authorization, dependencies, CI/CD, and software supply chain. Infrastructure + NetworkTraffic flow, ingress and egress, segmentation, DNS, TLS, and where the trust boundaries sit. OffensiveScope, recon, validation, evidence, impact, and reporting. Mostly notes for authorized testing.