I maintain my own "security checklists" I go over before launching an update or a new server component. They grow over time as I record learnings or the exposure surface increases. It's all about configuration e.g. presence of specific tests etc.
This time, I decided to try and save me some time by handing it over to Claude... and Claude said no 😂🙈. Apparently asking it do validate stuff in my own project from a list of points is "too mythos" for my tiny human brain.
