A 158-finding security audit, run with AI agents
Ran a security audit of the 5-machine fleet with AI agents: wrote a threat model and severity rubric first, had agents audit 9 areas against it, and ranked the 158 findings by root cause. The most urgent was a live private SSH key left in /tmp, where automatic snapshots had copied it.
The full write-up comes out of the interview: why, how, what broke, what it taught me, with pictures and links to the config.
