[job] Job Records @ Cathay

🌳 Cathay

🛸 Internal transfer

  • 2026 @ Cathay United Bank (IT Department)
    • Primary Role: BIPD - Credit Card Middle Platform Section
  • 2025 @ Cathay Financial Holdings (DDT & IT Department)
    • Primary Role: OSI Team
    • Concurrent Role: TIPD - Data Middle Platform Section @ Cathay United Bank
Read more

[tutorial] Taikai Introduction (based on ArchUnit)

Note: This page is an AI-generated (gpt-5-mini-2025-08-07) translation from Traditional Chinese and may contain minor inaccuracies.

📌 Introduction

Taikai is a Java architecture-checking tool based on ArchUnit. It provides pre-built rules to check code architecture, supports creating shared Rules Profile for reuse across multiple projects, and automatically verifies via unit tests whether code meets architectural requirements.

Read more

[tutorial] GitHub + PicGo + VSCode Extension

📌 Introduction

This article provides a tutorial on setting up GitHub, PicGo, and a VSCode extension to facilitate image uploading to GitHub repositories. It outlines the necessary prerequisites, the procedure to generate a GitHub token, and essential steps for configuring the PicGo extension in VSCode.

Read more

[note] How to Use GitHub Issue to Manage AI Agent's BDD + SDD + TDD Development Workflow

Note: This page is an AI-generated (gpt-5-mini-2025-08-07) translation from Traditional Chinese and may contain minor inaccuracies.

📌 Introduction

In the current AI development landscape, different methodologies are proliferating rapidly (for example coleam00/context-engineering-intro, bmad-code-org/BMAD-METHOD, automazeio/ccpm, and classmethod/tsumiki). These methodologies aim to help AI Agents plan before coding. However, they often store the large amount of planning documents directly in the project repo. Although they look detailed, these documents become a burden when requirements keep changing. When requirements change, it’s hard to verify whether the AI Agent has correctly read and updated the relevant documents, and difficult to audit and track changes, especially in collaborative environments or when maintaining legacy projects.

Read more

[tutorial] Introduction to sigstore's model signing tool

Note: This page is an AI-generated (gpt-5-mini-2025-08-07) translation from Traditional Chinese and may contain minor inaccuracies.

📌 Introduction

Introducing Sigstore’s model signing tool and describing how its three-layer structure (Sigstore Bundle, DSSE Envelope, In‑Toto Statement) provides integrity, authenticity, and transparency for machine learning model signing and verification. Also demonstrates simple signing and verification commands.

Read more

[note] Introduction to SBOM, AIBOM and Their Tools

Note: This page is an AI-generated (gpt-5-mini-2025-08-07) translation from Traditional Chinese and may contain minor inaccuracies.

📌 Introduction

This article introduces the Software Bill of Materials (SBOM) and its application in the AI domain, AIBOM. It briefly presents three common SBOM standard formats: SPDX, CycloneDX, and SWID. While introducing AIBOM, it explains the differences between AIBOM and Model Cards, and presents the open-source tool aetheris-ai/aibom-generator, which can extract model information from Hugging Face and perform scoring.

Read more

[note] Introduction to automated AI security auditing framework petri

Note: This page is an AI-generated (gpt-5-mini-2025-08-07) translation from Traditional Chinese and may contain minor inaccuracies.

📌 Introduction

Petri is a red-team tool for AI safety testing that simulates realistic interactive scenarios to detect potential model risks. Through collaboration between the Auditor, Target, and Judge, it performs various tasks such as general audits, multi-model comparisons, and whistleblowing tests to check whether models leak information, exhibit bias, or show other issues, improving AI safety and reliability in complex scenarios.

Read more