Who does the work

Two of the four levels are somebody's time rather than a pipeline. Nothing here was written from what anybody told us: every line is read off a published page, with the page and the date it was read.

Sources

• https://open-source.sgit.ai/about/index.html↗ — read 16 September 2026. The author page on open-source.sgit.ai, published CC BY 4.0. Every row of the record below is read off it.
• https://sgit.ai/demos/vaults/index.html↗ — read 16 September 2026. The published vault catalogue, which is where the delivered work is.

Dinis Cruz

Runs the correction at £500 and the two sessions at £1,500.

Founder of the sgit.ai network, RiskMandate.ai, The Cyber Boardroom, MyFeeds.ai and VoiceDebrief.ai; former OWASP Board member and organiser of the OWASP Summits; creator of the O2 Platform.

Why them: The method this store sells is theirs. The fifteen published templates, the grant-and-mandate model, the delta and the barrier taxonomy, and the six published vaults of exactly this work were all built by the person who would be doing yours.

• Former OWASP Board member — And organiser of the OWASP Summits — Lisbon 2011 and Woburn 2017 — the working-session format that the Open Security Summit series went on to build on. Open-source work still ships under the owasp-sbot organisation.
• Creator of the O2 Platform — The OWASP static-analysis engine of 2010 to 2012, and the first of a line of open-source tooling that continues in the osbot-* and mgraph-* families, memory_fs, Issues-FS and sgit-ai — all Apache-2.0, all on PyPI.
• Founder, RiskMandate.ai — The business risk layer for autonomous systems — the site the fifteen Agent Behaviour Policy templates this store sells are published on.
• Founder, sgit.ai and sgraph.ai — Encrypted vaults with git semantics, under Apache-2.0, and the network of nineteen sites of which this store is one. Each site publishes its argument before its implementation, so the commitments stay checkable.
• Founder, The Cyber Boardroom and MyFeeds.ai — A platform for the conversation between technical security teams and the board, and role-aware security briefings built on semantic knowledge graphs — CISO, engineer and board views of the same material. Both Apache-2.0.
• Works in the open, including the parts most companies do not — The code is Apache-2.0, roughly 1,100 working documents are CC BY 4.0, and the investor materials for two of the companies are on GitHub rather than behind a data room.

This document is released under the Creative Commons Attribution 4.0 International licence (CC BY 4.0).