← Portfolio
Skill fileInstructions the agent follows
→
Coding agentScaffolds the environment
→
Pulumi modulesSecure defaults for Azure
→
Policy and testsCrossGuard policy pack and compliance tests
→
Deployed environmentGoverned from the start
From a request to a governed environment. Architecture sketch.
- My role
- Lead; primary author
- Years
- 2025–2026
- Built with
- Pulumi, CrossGuard, Python, GitHub Actions
- Cloud
- Azure
The problem
Every proof of concept needs cloud infrastructure that is secure and compliant, and setting it up from scratch each time is slow.
What I built
- Pulumi modules for the common pieces of an environment, with secure settings as the default.
- A CrossGuard policy pack and compliance tests that fail a deployment that breaks the rules.
- Portable agent skills, so a coding agent can scaffold an environment from the skill file and still pass the checks.
Why it matters
The rules are written once as code and enforced the same way every time, so teams start from a compliant baseline.
Outcome
- Built to speed up the team's proof-of-concept deployments.
- A pattern for letting an AI agent do infrastructure work inside guardrails.