Code Examples: Turn Signals into Defensive Review Items

Create an Internal Validation Task

{
  "title": "Validate unexpected public hostname",
  "signal": "dev-login.example.org appeared in certificate transparency",
  "evidence": [
    {
      "source": "ct-log",
      "observed_at": "2026-06-28T15:30:00Z",
      "value": "dev-login.example.org"
    }
  ],
  "owner_question": "Is this hostname approved, current, and governed by an assigned team?",
  "requested_action": "Confirm inventory owner and planned remediation or acceptance.",
  "language_to_avoid": "Do not state that the hostname is vulnerable or compromised."
}