“EN-06-AI-Security-Agent-Defense”

List failure modes: duplicate delivery, at-least-once, lost ack, poison message,

Choose the concurrency primitives and justify vs alternatives:

Define retry/backoff/jitter, DLQ policy, and visibility timeout math.

Microservice / Event-Driven System Coder

Scaffolds an event-driven service with outbox, schema registry, contracts, and observability — keeps services loosely coupled.

gRPC / Protobuf API Builder

Defines versioned protobuf contracts, streaming RPCs, error model, and generates client/server stubs with interceptors.

Mobile (iOS/Android/Flutter) Feature Coder

Generates a mobile screen/feature with offline support, lifecycle correctness, and platform conventions.

Infrastructure as Code (Terraform/Pulumi/Docker/K8s)

Produces reviewable IaC: modular, idempotent, least-privilege IAM, with state and rollout safety.

CI/CD Pipeline Engineer

Creates secure, fast pipelines: caching, matrix tests, SBOM, signing, progressive delivery, and rollback.

Code Generation from Issue/PRD

Turns a product requirement into a shippable implementation plan + skeleton with acceptance criteria traceability. Useful at sprint start.

Acceptance criteria in Gherkin (Given/When/Then) — every PRD claim traced to

Technical design: architecture sketch (ASCII), data model changes, API

Task breakdown: small (<1 day) tickets with title, acceptance criteria, files

Test plan (unit/integration/E2E mapping to ACs), rollout plan (flag → % rollout

Then implement the foundation layer (models + migration + contract + validation)

Polyglot Translation Between Stacks

Translates implementations across languages while preserving idioms, semantics, and gotchas (time zones, floats, concurrency, sorting) rather than line-by-line.

Summarize behavior and identify semantic pitfalls in translation:

Map source constructs to target idioms (error values→exceptions/Result,

Staff-Engineer Pull Request Review

A rigorous, prioritized PR review that distinguishes blockers from nits and checks correctness, security, concurrency, and maintainability — like a senior reviewer.

Security-First Code Audit

OWASP-oriented security review for a module or whole PR. Produces exploit scenarios and fixes ordered by severity (CVSS-like).

Root-Cause Analysis (5 Whys / Blameless Postmortem)

Runs a blameless postmortem for an incident: timeline, root causes, contributing factors, and durable system fixes — not human blame.