Handbooks
Three PDFs. Sourced and defensive; working notes, not verdicts.
An independent open-source and social-media review of two real cases. One method that writes the source, the step, and the uncertainty side by side.
Not this Not an official investigation file; it makes no identity or criminal claim.
OSINT · SOCMINT · Two real cases
Eight pages. The real Log4Shell case with a sourced prompt, an evidence table, CTI triage, and a human review step.
Not this The LLM is an organiser here, not a source; nothing enters a report unreviewed.
LLM · Log4Shell · Human review
Twenty pages with node graphs. Research queue, human approval, static workflow review, runtime gate, and change receipts in one story.
Not this Not a certificate, an audit report, or a security guarantee.
n8n · Human approval · Workflow security
These files are for learning, verification, and defensive open-source reading. They do not turn open traces into identity proof; anything uncertain stays marked possible or unverified.
