dependency-security

Episodes (3)

Trajectory notes

• 2026-08-28T06:31:33Z: llm-api-reseller-dependency-risks closed (faded) — The reported hidden reseller chains independently support Scott’s Sovereign Software Assurance position that critical dependencies must be explicit, inspectable, and replaceable. If substantiated, the findings materially affect
• 2026-08-27T05:29:40Z: safer-dependencies-claude-code-auditing closed (faded) — Architecture, Not Vibes and Runtime Governance already call for independent, in-path gates around consequential agent actions, while Scott actively uses Claude Code and has a security-review method built around independen