Proof · Insights

Primary sources worth reading

A manually curated list of references on SOC 2 controls, continuous integration and delivery (CI/CD) hardening, vulnerability prioritization, and software supply-chain security. Curated and reviewed by Yellow Theme. For Yellow Theme’s own analysis, read the engineering notes.

These links are provided for reference. They are not endorsements and do not replace audit, legal, or certification advice.