Secure software platforms
Software that can show who acted, what changed, and what was reviewed.
Herder builds product workflows for teams that need controlled access, traceable processing, safe handling of submitted files, and a recoverable record of decisions.
The problem
Security becomes difficult when ordinary product use bypasses the intended control. A submitted archive may fail halfway through processing. A reviewer may need to see exactly what was received. A later investigation may need to connect an output to its original input. The system must retain that path without relying on memory or manual reconstruction.
The work
| Identity | Credential checks, signed sessions, authorization decisions, and clear boundaries around access. |
|---|---|
| Provenance | Content hashes, processing records, review steps, and links between input, change, and outcome. |
| Processing | Input validation, hardened archive handling, controlled errors, and recovery paths that can be tested. |
| Delivery | Automated tests, CI workflows, containerized services, and release records. |
Evidence
Secure enterprise software platform
A private multi-service platform built with .NET 8/C#, Python/FastAPI, React/TypeScript, Docker, and CI. It supports controlled ingestion, provenance, review, and recovery.
| Controls | HMAC-signed sessions, constant-time credential checks, SHA-256 provenance, hardened archive processing, and human review controls. |
|---|---|
| Test record | 7 .NET projects, 169 .NET tests, 21 Python test modules, and 7 CI workflows. |
| Boundary | Customer and implementation details remain private. |