GE-001 Email security investigation 57 parts 2026
An email security practice required a portable working system for the investigation of suspicious mail: the triage of alerts, header forensics, and the writing and tuning of detection rules. Specified as a complete kit, tied to no machine but the owner's.
Eleven skills, six specialist agents and seven deterministic instruments, assembled to one specification. The instruments parse mail, interpret authentication records, trace delivery routes, unwrap addresses and extract indicators; each runs with nothing installed.
Fifty-seven parts, everything delivered at handover counted: the classes recorded above are the principal ones, not the whole of the kit. Every instrument was proven against a fabricated specimen before handover; correct behaviour was demonstrated, not assumed.
Inspection surfaced two defects the assembly reports had not declared, one of character encoding, one of two instruments handling the same indicator differently. Both were corrected at root and re-proven.
Handed over whole and removed from this bench. The system carries no reference back to this office; that was a term of the commission, and it was met.