Evidence first
Record source context, timestamps, assumptions, confidence, and uncertainty instead of treating conclusions as self-evident.
About
Methodical security work with clear boundaries.
Local where possible
Browser utilities are designed to avoid uploads and make the boundary clear before any sensitive data is handled.
Readable reporting
Reporting should be short enough to act on and detailed enough to reproduce.
Ethical constraints
Work stays within authorization, avoids unnecessary collection, and does not turn public data into harassment or harm.