“EN-03-Image-Generation-Midjourney-SD-Flux”

API-First / Schema-First Design Facilitator

Forces contract design before implementation, with evolution/versioning rules and consumer review — prevents costly API mistakes.

Multi-Tenancy Architecture Selector

Selects and details an isolation model (shared DB / schema per tenant / DB per tenant) against real requirements, including noisy-neighbor and backup isolation.

Event-Driven / CQRS / Saga Designer

Designs reliable event flows (Kafka/RabbitMQ/EventBridge): contracts, ordering, duplicates, sagas, and read models — including when NOT to use events.

Caching Architecture Advisor

Designs layered caching with explicit invalidation and consistency contracts — the hardest part of real systems.

Rate Limiting, Quota & Throttling Designer

Designs limiters (per-user/IP/tenant/API key), algorithm choice, and 429 contracts — including distributed counters and fairness.

Search & Recommendation System Designer

Designs search (ES/OpenSearch/vector/hybrid) with relevance tuning pipelines — includes ranking eval and zero-result handling.

RAG / LLM-Application Architect

Designs a production retrieval-augmented generation system: chunking, embedding, hybrid retrieval, reranking, evaluation, and guardrails. (LLM-native dev category.)

LLM Evaluation / Hallucination Mitigation Planner

Builds an eval harness for LLM features: golden sets, metrics, red-team cases, and CI regression gates for prompts/chains.

Observability/SLO Architect

Defines SLOs, error budgets, alerting, and dashboards for a service from user journeys — symptom-based alerting, not noise.

Cost Optimization / FinOps Engineer

Finds and prioritizes cloud/infra spend reductions with risk and engineering cost.

Migration to the Cloud / Between Clouds Planner

Sequences a migration with risk control: inventory, patterns, data movement, cutover rehearsals, and rollback.

Security Architecture / Threat Modeler (STRIDE)

Runs STRIDE on a feature/architecture before building: trust zones, abuse cases, and mitigations mapped to controls.

Technical Debt Prioritization Facilitator

Converts vague "tech debt" complaints into a ranked, quantified backlog linked to business risk and remediation cost.

Technical Spec / Design Doc Reviewer

Reviews a design doc for gaps and risky assumptions before implementation — cheaper than discovering them mid-build.

Operability: metrics/alerts/SLO, feature flags, rollback plan, launch plan,

Simplicity: does the design introduce infrastructure before it is needed? Are

Windows Endpoint Hardening Guide

Windows终端安全加固指南,涵盖GPO、攻击面减少、Credential Guard等。

Linux Server Hardening Baseline

Linux服务器安全加固基线,涵盖CIS基准、系统配置和服务加固。

Database Security Hardening

数据库安全加固,涵盖认证、授权、加密、审计和配置。

Web Server Hardening (Nginx/Apache)

Web服务器加固,涵盖TLS配置、头设置、访问控制和日志。