November 2026
4artifacts
Yank Trace
A CLI that takes a list of malicious package versions and tells you which CI runs installed them and which secrets those runs could read, so the rotation list is evidence instead of a guess.
OrphanKeys
Runs at every employee departure and lists each API key, service account and OAuth app that person created or last touched, so the leaver ticket can't close while any of them still has no owner.
TrifectaLint
A CLI that reads an agent's tool and MCP config, tags each tool by what it can touch, and fails the build when a single agent holds private-data access, untrusted-content intake, and an outbound…
LinkLedger
An OfferStack tracker for card-linked offers (Amex Offers, Chase Offers, Citi Merchant Offers and the rest) that knows each issuer's posting window, matches the credits on your statement export, and…