@nakedoshadow

shadows-deploy-guardian enforces a six-gate pre-deployment checklist covering git status, tests, type checking, build validation, secrets scanning, and environment readiness. designed to block deployments when any gate fails.

shadows-security-scanner runs a 7-phase local audit covering reconnaissance, dependencies, owasp top 10 patterns, api security, hardening headers, and git history secrets. grep-based detection with explicit false positive/negative caveats.