Ex-Deloitte Auditor Open-Sources Full SOC 2 Methodology for AI Systems

·1 views

A former Deloitte auditor has publicly released a complete SOC 2 audit methodology on GitHub under the Chiaro-HQ repository. The resource is aimed at helping teams apply structured compliance frameworks to AI systems. The release was shared on Hacker News, where it received minimal early engagement. SOC 2 is a widely recognized auditing standard focused on security, availability, and data privacy controls. The open-source approach is intended to make professional audit methodology more accessible to developers and organizations building AI products.

Read the full story at Hacker News

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Sylvarcon 2049 Launches Story-Driven Cybersecurity CTF with 14 Free Missions

A team of developers has released Sylvarcon 2049, a narrative-based capture-the-flag platform designed to teach cybersecurity through interconnected story-driven investigations. Unlike traditional CTF platforms that present isolated technical challenges, Sylvarcon 2049 embeds each mission within a broader cyberpunk case narrative called the Lazarus Protocol. Players progress through missions combining digital forensics, OSINT, ethical hacking, and evidence analysis using managed remote labs. The platform currently offers 14 free missions across 11 interface languages and is available as a live product. The developers are actively seeking early users to test missions and provide feedback to guide future development.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

TokenMizer Uses Graph Memory to Give LLMs Persistent Context Across Sessions

A developer has built TokenMizer, an open-source proxy tool that sits between applications and OpenAI-compatible APIs to give large language models persistent memory across sessions. Unlike conventional approaches that re-inject full chat histories into the context window, TokenMizer extracts entities and relationships from conversations and stores them as a graph using SQLite. The system requires no changes to existing application code — developers simply redirect their API base URL to TokenMizer instead of OpenAI. A built-in visual explorer powered by D3.js lets users inspect the memory graph and trace how past context is being retrieved. TokenMizer is available as a pip-installable Python library and also supports the Model Context Protocol, allowing the same memory graph to be accessed across different tools and editors.

0 comments Read more at DEV Community

ProgrammingHacker News ·

Truemetrics Seeks Founding GTM Lead in Berlin

Truemetrics, a Y Combinator S23 batch startup, is hiring a Founding Go-to-Market (GTM) Lead based in Berlin. The job listing was posted on the Y Combinator company jobs board. The role appears to be an early and senior position focused on building the company's market entry strategy. No further details about compensation, requirements, or team size were publicly disclosed in the listing.

0 comments Read more at Hacker News

ProgrammingDEV Community ·

ContextOS Tackles AI Coding Agent Failures in Large Repositories

AI coding assistants frequently struggle with large codebases not because of reasoning limitations, but due to flawed retrieval methods that break code structure when chunking files arbitrarily. Standard RAG systems rely on character-count chunking and vector embeddings, which destroy function boundaries and turn exact symbol lookups into probabilistic guesses. A developer has built ContextOS, a local-first context engine that uses Tree-sitter to parse repositories into logical code units and prioritizes deterministic lexical search via SQLite FTS5 over embeddings. In benchmarks against the Redis 7.x codebase, ContextOS achieved 98% file-level recall for exact-function queries while averaging only 589 tokens per query, compared to the tens of thousands typically consumed. The tool operates as a Model Context Protocol server, making it compatible with AI coding clients like Cursor and Claude Desktop.

0 comments Read more at DEV Community