“EN-06-AI-Security-Agent-Defense”

API-First / Schema-First Design Facilitator

Forces contract design before implementation, with evolution/versioning rules and consumer review — prevents costly API mistakes.

Multi-Tenancy Architecture Selector

Selects and details an isolation model (shared DB / schema per tenant / DB per tenant) against real requirements, including noisy-neighbor and backup isolation.

Event-Driven / CQRS / Saga Designer

Designs reliable event flows (Kafka/RabbitMQ/EventBridge): contracts, ordering, duplicates, sagas, and read models — including when NOT to use events.

Caching Architecture Advisor

Designs layered caching with explicit invalidation and consistency contracts — the hardest part of real systems.

Rate Limiting, Quota & Throttling Designer

Designs limiters (per-user/IP/tenant/API key), algorithm choice, and 429 contracts — including distributed counters and fairness.

File Upload / Media Pipeline Architect

Designs reliable uploads for large files with virus scanning, image/video processing, and storage lifecycle.

Search & Recommendation System Designer

Designs search (ES/OpenSearch/vector/hybrid) with relevance tuning pipelines — includes ranking eval and zero-result handling.

RAG / LLM-Application Architect

Designs a production retrieval-augmented generation system: chunking, embedding, hybrid retrieval, reranking, evaluation, and guardrails. (LLM-native dev category.)

LLM Evaluation / Hallucination Mitigation Planner

Builds an eval harness for LLM features: golden sets, metrics, red-team cases, and CI regression gates for prompts/chains.

Observability/SLO Architect

Defines SLOs, error budgets, alerting, and dashboards for a service from user journeys — symptom-based alerting, not noise.

Cost Optimization / FinOps Engineer

Finds and prioritizes cloud/infra spend reductions with risk and engineering cost.

Migration to the Cloud / Between Clouds Planner

Sequences a migration with risk control: inventory, patterns, data movement, cutover rehearsals, and rollback.

Security Architecture / Threat Modeler (STRIDE)

Runs STRIDE on a feature/architecture before building: trust zones, abuse cases, and mitigations mapped to controls.

Technical Debt Prioritization Facilitator

Converts vague "tech debt" complaints into a ranked, quantified backlog linked to business risk and remediation cost.

Technical Spec / Design Doc Reviewer

Reviews a design doc for gaps and risky assumptions before implementation — cheaper than discovering them mid-build.

Operability: metrics/alerts/SLO, feature flags, rollback plan, launch plan,

Simplicity: does the design introduce infrastructure before it is needed? Are

Test Strategy Document Generator

Produces a complete test strategy for a service: pyramid mapping, environments, data, ownership, and release gates — aligned to risk rather than coverage theater.

Property-Based Test Designer

Finds invariants and writes property-based tests (Hypothesis/fast-check) that discover edge cases humans miss.

Chaos & Resilience Test Engineer

Designs controlled failure injection to verify retry/fallback/deadline/circuit breaker behavior actually works under load.