Software thathas to be right.

Event-sourced and append-only

Device state is a fold over an event log. A database trigger rejects UPDATE and DELETE, so the audit trail can't be rewritten, not even by a bug.

The workflow is data, not code

One transition table drives graph validation, the generated diagram and the exact actions the UI offers, with a reason shown for every blocked one.

Part 11-style signatures

Decisions are signed against the exact record version the signer saw. Any past version replays on the server and can be shared as a link.

Document analysis that cites

Uploaded PDFs are analysed by a background worker. Every finding quotes its page, quotes are checked against that page, and accuracy is held to a baseline by a CI quality gate.

13 checks, four severities

Broken links, server errors, timeouts and redirect chains, plus missing or duplicate titles and descriptions, alt text, page language, empty links and unlabelled form fields.

Off the request path

The ASP.NET Core API queues audits on RabbitMQ for a separate worker that crawls, scores and emails the result. Quartz.NET schedules recurring re-audits.

Pen-tested and hardened

The crawler refuses loopback, private and cloud-metadata addresses (SSRF). JWT with email verification, rate limiting, account lockout and strict security headers.

Shipped like production

Docker Compose behind nginx with Let's Encrypt on a VPS, auto-deployed from GitLab CI/CD. Integration tests run against real SQL Server and RabbitMQ.