Alexander
North
Founder | Cybersecurity Professional | AI-Assisted Development & Governance
ABOUT
Solo founder and cybersecurity practitioner. My path has moved through different environments, but the constant has been building systems and understanding how they work. I design software and tools to solve real problems, then refine them through direct use. LabList started as a personal solution for tracking hands-on work and continues to evolve through that process.
I build web applications, think in systems, and treat security as foundational rather than optional. I enjoy analyzing risk and evaluating mitigations across supply chain, architecture, third-party trust boundaries, and the governance frameworks that hold them together. I'm targeting roles in GRC, AI governance, and compliance where this thinking compounds.
Always building. Always learning. Always improving.
BACKGROUND
PROJECTS
TGF — The Governance Framework for AI-Assisted Development
A Claude Code plugin that turns senior DevSecOps judgment into enforceable rules grounded in primary sources. Every rule cites a sub-rule identifier from OWASP ASVS, NIST, ISO, MITRE, or an RFC. Built for developers using AI heavily who want their work to actually meet industry standards by default.
05/04/2026 — ongoing
CERTS
ACTIVITY LOG
Audit skills/code-quality/ — WS4 Target 14 (Build Step 5, Commit 16/22) — closes Build Step 5; Audit skills/discovery/ — WS4 Target 11 (Build Step 4, Commit 13/22) — closes Build Step 4; Audit skills/project-management/ — WS4 Target 10 (Build Step 4, Commit 12/22)
View full writeup →My view: AI will be largely responsible for the bulk of code going forward. I’ll defend that in a minute, but I should disclose something first. I’m not a software engineer. I have experience in languages like Python and SQL from classes I’ve taken, but fingers to keyboard coding isn’t my bread and butter. My domain is security, and software engineering itself isn’t my desired goal. I respect the work software engineers do and I commend their skills. That being said, I do see a shift happening....
View full writeup →
Audit skills/security-input-validation/ — WS4 Target 4 (Build Step 3, Commit 6/22) — closes Build Step 3; Amend CLAUDE.md §2 with communication discipline + file research-security hook bug; Audit skills/security-output-encoding/ — WS4 Target 3 (Build Step 3, Commit 5/22)
View full writeup →Operationalize security-auditor agent + coordinate boundary discipline (WS3 Build Step 3, Commit 4/6); Operationalize red-team agent + apply smoke-test refinements (WS3 Build Step 4, Commit 5/6); Freshen status docs to reflect Phase 6 pause + framework-hardening progress
View full writeup →A Claude Code plugin that turns senior DevSecOps judgment into enforceable rules grounded in primary sources. Every rule cites a sub-rule identifier from OWASP ASVS, NIST, ISO, MITRE, or an RFC. Built for developers using AI heavily who want their work to actually meet industry standards by default.
View full writeup →