The 10-year rolling return on US Treasuries is now -1%, below the lows of December 1959 and September 1981, the latter of which marked the start of the greatest bond bull market in history:
If you are just now evaluating a software factory you are way the f*ck behind.
This should be your top priority.
At a minimum, every night run the Claude security plugin and @vercel’s deepsec on a dedicated machine with a dedicated user (not root) using the latest frontier model and also create a cascading “ladder” of models with the most advanced at the top of the ladder. This should be a launchd or cron task.
In addition, you need a realtime bot listening for / tracking all CVEs and it immediately provides patches and/or notifies you of a pull request for the patch and any operator actions (think DevOps). @grok @bot is the best at this because the CVEs propagate on X.
Then you can add, more nightly runners for performance, testing, documentation, feature drift, etc.