Web apps with auth
Next.js apps with server-side checks, route boundaries, and clear deployment notes.
- API boundary map
- session and role checks
- ownership review
- ship-ready deployment pass
LeadGen is the reference build: webhook boundaries, account-state changes, and local review data kept visible.
Open LeadGenRuntime tooling
Tools that make event order, state changes, and fallback paths easy to see.
- event sequence notes
- state-machine review
- failure trace
- runtime proof clips
Herald and BeserkBot show the shape: routing stages, rollback paths, latency-sensitive prediction, and explicit ceilings.
Open HeraldSecurity reports
Reports that separate proof, impact, assumptions, and fixes.
- asset scope
- deterministic reproduction
- impact boundary
- remediation path
14 research notes are organized on the security page. bxenc adds the tooling side with crypto choices and limitations shown plainly.
Open bxenc