audit-methodology

The complete Chiaro methodology for SOC 2 readiness and audit. Controls, criteria, evidence standards, and every judgment call, published so you can check it.

A reward-first smart contract audit methodology — target selection, invariant-first hunting, and proof/novelty/impact gates. Optimises dollars-per-run, not findings-per-run.

Web3 security research methodology: triage gates, invariant checks, report structure, and audit workflow notes

A checklist + verification script for keeping a UK/EU SaaS on EEA-sovereign infrastructure. The exact script + methodology I run quarterly on production stacks. CC BY 4.0.