The morning I announced what I'd been building, a comment showed up on the post. It was friendly. It opened with a compliment, agreed with me, and then walked through a few of the risk signals worth thinking about...who owns the code, what a change actually touches when it runs, whether it goes anywhere near auth or payments. Solid stuff. It was also every point I'd made in the post it was commenting on. Then it suggested I go build a tool that scores that risk automatically and flags it befo...