Security

I build safe defaults in from the start, so they don't get bolted on at the end. Here are the trust calls I've made, and where you can check them.

Selected work

Role: Owner. I made the calls, rebuilt the site and checked it live.
When: Oct 2026
Context: I moved this site to Cloudflare Pages and wanted it to load nothing it doesn't need: no trackers, no outside scripts, and less personal info on the page.
What I did:
- I set a strict rule for what the browser may load: this site's own files only.
- I kept Cloudflare's email protection on. That meant allowing one small script, served from this site's own address. Nothing else runs.
- I turned off analytics and took my phone number off the site.
Artifact: corbinimgrund.me. Your browser's developer tools will show every request staying on this site.
Outcome: My live check passed on Oct 24, 2026, with no requests to analytics or any other outside host.
Stack/tools: Cloudflare Pages

Built with a team of AI agents under my direction. I set the scope, made the product calls, and nothing shipped without my yes.

Role: Owner. I set the rules and built the page and the checks behind it.
When: Oct 2026
Context: If agents do the work, a buyer needs to see what they can't do. The page lists only controls a visitor can check, and names the file or test behind each one.
What I did:
- I put a person before anything going live. Publishing tools start in dry-run, and a live build needs a sign-off flag that agents are never allowed to flip.
- I ruled out agent spending and automatic replies. Suggested replies wait as drafts for a person.
- I kept the site free of analytics, tracking scripts and cookies, and it loads nothing from other sites.
Artifact: MeltingFace.io Security & privacy
Outcome: Live, and every control on the page names the file or test behind it.

Built with a team of AI agents under my direction. I set the scope, made the product calls, and nothing shipped without my yes.