profullstack · ralyodio · Sep 8, 2026 · Sep 8, 2026
diff --git a/.gitignore b/.gitignore
@@ -27,3 +27,8 @@ dist/enhanced/
 # public/cards/hacking/ are the committed record; these are intermediates.
 #   node scripts/hacking-legends.mjs all
 dist/hacking/
+
+# Security Professionals (Series Three) working dirs. Same deal — the published
+# faces under public/cards/security/ are the committed record.
+#   node scripts/security-pros.mjs all
+dist/security/
diff --git a/README.md b/README.md
@@ -78,13 +78,30 @@ Chromium — set `CHROME_PATH` if it is not on the usual paths.
 `dist/hacking/` is gitignored, so the full-resolution faces are local only.
 Archive them before wiping the directory if you want print masters.
 
-**Series Three — Security Professionals** (`src/data/security.ts`, roster only):
+**Series Three — Security Professionals** (`src/data/security.ts`, 50 cards):
 
-50 hand-curated cards for the defensive side of the field. Copy and sources are
-written; no art pipeline exists yet, so the set renders as a data-only roster at
-`/security-professionals` and its cards have no `front`/`back` and no card pages.
-When art starts, copy `scripts/hacking-legends.mjs` — the data module already
-carries every field that pipeline reads.
+```bash
+pnpm security validate         # roster checks, reports what art is missing
+pnpm security all              # portraits -> render -> publish
+pnpm security all 1 5 12       # ...only these card numbers
+pnpm security render           # re-render faces from the template, no API calls
+```
+
+Same stages and the same resumability as Series Two, with one deliberate
+difference: **`all` does not run `enhance`.** On Series Two that image-to-image
+finish pass rewrote text on the card faces despite the prompt forbidding it — it
+fabricated quotes attributed to living people, invented stat panels that were not
+on the card, and misspelled a name. Nothing in the pipeline catches that, because
+there is no OCR step. Since this set's whole premise is documented, sourced
+history, an invented quote is the worst defect it can carry, so the pass is
+opt-in: it refuses to run unless `ENHANCE_I_WILL_CHECK_EVERY_FACE=1` is set, and
+running it means checking every face by eye before publish.
+
+Two template changes follow from the same finding. The curator's note renders as a
+labelled panel rather than wrapped in quote marks, because on Series Two backs the
+quoted note reads as something the subject said — the field is editorial voice.
+And the front's portrait window is taller, so the caption band is sized to what it
+holds instead of leaving a third of the card empty.
 
 Nobody appears in more than one series; `src/data/roster.ts` holds the shared card
 vocabulary that Series Two and Three both render through.

diff --git a/assets/portraits/security-pros/card_001.png b/assets/portraits/security-pros/card_001.png
diff --git a/assets/portraits/security-pros/card_002.png b/assets/portraits/security-pros/card_002.png
diff --git a/assets/portraits/security-pros/card_003.png b/assets/portraits/security-pros/card_003.png
diff --git a/assets/portraits/security-pros/card_004.png b/assets/portraits/security-pros/card_004.png
diff --git a/assets/portraits/security-pros/card_005.png b/assets/portraits/security-pros/card_005.png
diff --git a/assets/portraits/security-pros/card_006.png b/assets/portraits/security-pros/card_006.png
diff --git a/assets/portraits/security-pros/card_007.png b/assets/portraits/security-pros/card_007.png
diff --git a/assets/portraits/security-pros/card_008.png b/assets/portraits/security-pros/card_008.png
diff --git a/assets/portraits/security-pros/card_009.png b/assets/portraits/security-pros/card_009.png
diff --git a/assets/portraits/security-pros/card_010.png b/assets/portraits/security-pros/card_010.png
diff --git a/assets/portraits/security-pros/card_011.png b/assets/portraits/security-pros/card_011.png
diff --git a/assets/portraits/security-pros/card_012.png b/assets/portraits/security-pros/card_012.png
diff --git a/assets/portraits/security-pros/card_013.png b/assets/portraits/security-pros/card_013.png
diff --git a/assets/portraits/security-pros/card_014.png b/assets/portraits/security-pros/card_014.png
diff --git a/assets/portraits/security-pros/card_015.png b/assets/portraits/security-pros/card_015.png
diff --git a/assets/portraits/security-pros/card_016.png b/assets/portraits/security-pros/card_016.png
diff --git a/assets/portraits/security-pros/card_017.png b/assets/portraits/security-pros/card_017.png
diff --git a/assets/portraits/security-pros/card_018.png b/assets/portraits/security-pros/card_018.png
diff --git a/assets/portraits/security-pros/card_019.png b/assets/portraits/security-pros/card_019.png
diff --git a/assets/portraits/security-pros/card_020.png b/assets/portraits/security-pros/card_020.png
diff --git a/assets/portraits/security-pros/card_021.png b/assets/portraits/security-pros/card_021.png
diff --git a/assets/portraits/security-pros/card_022.png b/assets/portraits/security-pros/card_022.png
diff --git a/assets/portraits/security-pros/card_023.png b/assets/portraits/security-pros/card_023.png
diff --git a/assets/portraits/security-pros/card_024.png b/assets/portraits/security-pros/card_024.png
diff --git a/assets/portraits/security-pros/card_025.png b/assets/portraits/security-pros/card_025.png
diff --git a/assets/portraits/security-pros/card_026.png b/assets/portraits/security-pros/card_026.png
diff --git a/assets/portraits/security-pros/card_027.png b/assets/portraits/security-pros/card_027.png
diff --git a/assets/portraits/security-pros/card_028.png b/assets/portraits/security-pros/card_028.png
diff --git a/assets/portraits/security-pros/card_029.png b/assets/portraits/security-pros/card_029.png
diff --git a/assets/portraits/security-pros/card_030.png b/assets/portraits/security-pros/card_030.png
diff --git a/assets/portraits/security-pros/card_031.png b/assets/portraits/security-pros/card_031.png
diff --git a/assets/portraits/security-pros/card_032.png b/assets/portraits/security-pros/card_032.png
diff --git a/assets/portraits/security-pros/card_033.png b/assets/portraits/security-pros/card_033.png
diff --git a/assets/portraits/security-pros/card_034.png b/assets/portraits/security-pros/card_034.png
diff --git a/assets/portraits/security-pros/card_035.png b/assets/portraits/security-pros/card_035.png
diff --git a/assets/portraits/security-pros/card_036.png b/assets/portraits/security-pros/card_036.png
diff --git a/assets/portraits/security-pros/card_037.png b/assets/portraits/security-pros/card_037.png
diff --git a/assets/portraits/security-pros/card_038.png b/assets/portraits/security-pros/card_038.png
diff --git a/assets/portraits/security-pros/card_039.png b/assets/portraits/security-pros/card_039.png
diff --git a/assets/portraits/security-pros/card_040.png b/assets/portraits/security-pros/card_040.png
diff --git a/assets/portraits/security-pros/card_041.png b/assets/portraits/security-pros/card_041.png
diff --git a/assets/portraits/security-pros/card_042.png b/assets/portraits/security-pros/card_042.png
diff --git a/assets/portraits/security-pros/card_043.png b/assets/portraits/security-pros/card_043.png
diff --git a/assets/portraits/security-pros/card_044.png b/assets/portraits/security-pros/card_044.png
diff --git a/assets/portraits/security-pros/card_045.png b/assets/portraits/security-pros/card_045.png
diff --git a/assets/portraits/security-pros/card_046.png b/assets/portraits/security-pros/card_046.png
diff --git a/assets/portraits/security-pros/card_047.png b/assets/portraits/security-pros/card_047.png
diff --git a/assets/portraits/security-pros/card_048.png b/assets/portraits/security-pros/card_048.png
diff --git a/assets/portraits/security-pros/card_049.png b/assets/portraits/security-pros/card_049.png
diff --git a/assets/portraits/security-pros/card_050.png b/assets/portraits/security-pros/card_050.png
diff --git a/package.json b/package.json
@@ -11,7 +11,10 @@
     "db:migrate": "node scripts/migrate.mjs",
     "hacking": "node scripts/hacking-legends.mjs",
     "hacking:validate": "node scripts/hacking-legends.mjs validate",
-    "hacking:render": "node scripts/hacking-legends.mjs render"
+    "hacking:render": "node scripts/hacking-legends.mjs render",
+    "security": "node scripts/security-pros.mjs",
+    "security:validate": "node scripts/security-pros.mjs validate",
+    "security:render": "node scripts/security-pros.mjs render"
   },
   "dependencies": {
     "@libsql/client": "^0.17.4",

diff --git a/public/cards/security/001-whitfield-diffie-back.png b/public/cards/security/001-whitfield-diffie-back.png
diff --git a/public/cards/security/001-whitfield-diffie-front.png b/public/cards/security/001-whitfield-diffie-front.png
diff --git a/public/cards/security/002-martin-hellman-back.png b/public/cards/security/002-martin-hellman-back.png
diff --git a/public/cards/security/002-martin-hellman-front.png b/public/cards/security/002-martin-hellman-front.png
diff --git a/public/cards/security/003-ron-rivest-back.png b/public/cards/security/003-ron-rivest-back.png
diff --git a/public/cards/security/003-ron-rivest-front.png b/public/cards/security/003-ron-rivest-front.png
diff --git a/public/cards/security/004-adi-shamir-back.png b/public/cards/security/004-adi-shamir-back.png
diff --git a/public/cards/security/004-adi-shamir-front.png b/public/cards/security/004-adi-shamir-front.png
diff --git a/public/cards/security/005-leonard-adleman-back.png b/public/cards/security/005-leonard-adleman-back.png
diff --git a/public/cards/security/005-leonard-adleman-front.png b/public/cards/security/005-leonard-adleman-front.png
diff --git a/public/cards/security/006-phil-zimmermann-back.png b/public/cards/security/006-phil-zimmermann-back.png
diff --git a/public/cards/security/006-phil-zimmermann-front.png b/public/cards/security/006-phil-zimmermann-front.png
diff --git a/public/cards/security/007-bruce-schneier-back.png b/public/cards/security/007-bruce-schneier-back.png
diff --git a/public/cards/security/007-bruce-schneier-front.png b/public/cards/security/007-bruce-schneier-front.png
diff --git a/public/cards/security/008-paul-kocher-back.png b/public/cards/security/008-paul-kocher-back.png
diff --git a/public/cards/security/008-paul-kocher-front.png b/public/cards/security/008-paul-kocher-front.png
diff --git a/public/cards/security/009-dorothy-denning-back.png b/public/cards/security/009-dorothy-denning-back.png
diff --git a/public/cards/security/009-dorothy-denning-front.png b/public/cards/security/009-dorothy-denning-front.png
diff --git a/public/cards/security/010-gene-spafford-back.png b/public/cards/security/010-gene-spafford-back.png
diff --git a/public/cards/security/010-gene-spafford-front.png b/public/cards/security/010-gene-spafford-front.png
diff --git a/public/cards/security/011-ross-anderson-back.png b/public/cards/security/011-ross-anderson-back.png
diff --git a/public/cards/security/011-ross-anderson-front.png b/public/cards/security/011-ross-anderson-front.png
diff --git a/public/cards/security/012-matt-blaze-back.png b/public/cards/security/012-matt-blaze-back.png
diff --git a/public/cards/security/012-matt-blaze-front.png b/public/cards/security/012-matt-blaze-front.png
diff --git a/public/cards/security/013-radia-perlman-back.png b/public/cards/security/013-radia-perlman-back.png
diff --git a/public/cards/security/013-radia-perlman-front.png b/public/cards/security/013-radia-perlman-front.png
diff --git a/public/cards/security/014-steven-bellovin-back.png b/public/cards/security/014-steven-bellovin-back.png
diff --git a/public/cards/security/014-steven-bellovin-front.png b/public/cards/security/014-steven-bellovin-front.png
diff --git a/public/cards/security/015-william-cheswick-back.png b/public/cards/security/015-william-cheswick-back.png
diff --git a/public/cards/security/015-william-cheswick-front.png b/public/cards/security/015-william-cheswick-front.png
diff --git a/public/cards/security/016-marcus-ranum-back.png b/public/cards/security/016-marcus-ranum-back.png
diff --git a/public/cards/security/016-marcus-ranum-front.png b/public/cards/security/016-marcus-ranum-front.png
diff --git a/public/cards/security/017-wietse-venema-back.png b/public/cards/security/017-wietse-venema-back.png
diff --git a/public/cards/security/017-wietse-venema-front.png b/public/cards/security/017-wietse-venema-front.png
diff --git a/public/cards/security/018-dan-farmer-back.png b/public/cards/security/018-dan-farmer-back.png
diff --git a/public/cards/security/018-dan-farmer-front.png b/public/cards/security/018-dan-farmer-front.png
diff --git a/public/cards/security/019-gordon-lyon-back.png b/public/cards/security/019-gordon-lyon-back.png
diff --git a/public/cards/security/019-gordon-lyon-front.png b/public/cards/security/019-gordon-lyon-front.png
diff --git a/public/cards/security/020-martin-roesch-back.png b/public/cards/security/020-martin-roesch-back.png
diff --git a/public/cards/security/020-martin-roesch-front.png b/public/cards/security/020-martin-roesch-front.png
diff --git a/public/cards/security/021-gerald-combs-back.png b/public/cards/security/021-gerald-combs-back.png
diff --git a/public/cards/security/021-gerald-combs-front.png b/public/cards/security/021-gerald-combs-front.png
diff --git a/public/cards/security/022-renaud-deraison-back.png b/public/cards/security/022-renaud-deraison-back.png
diff --git a/public/cards/security/022-renaud-deraison-front.png b/public/cards/security/022-renaud-deraison-front.png
diff --git a/public/cards/security/023-paul-vixie-back.png b/public/cards/security/023-paul-vixie-back.png
diff --git a/public/cards/security/023-paul-vixie-front.png b/public/cards/security/023-paul-vixie-front.png
diff --git a/public/cards/security/024-niels-provos-back.png b/public/cards/security/024-niels-provos-back.png
diff --git a/public/cards/security/024-niels-provos-front.png b/public/cards/security/024-niels-provos-front.png
diff --git a/public/cards/security/025-jeremiah-grossman-back.png b/public/cards/security/025-jeremiah-grossman-back.png
diff --git a/public/cards/security/025-jeremiah-grossman-front.png b/public/cards/security/025-jeremiah-grossman-front.png
diff --git a/public/cards/security/026-robert-hansen-back.png b/public/cards/security/026-robert-hansen-back.png
diff --git a/public/cards/security/026-robert-hansen-front.png b/public/cards/security/026-robert-hansen-front.png
diff --git a/public/cards/security/027-mark-curphey-back.png b/public/cards/security/027-mark-curphey-back.png
diff --git a/public/cards/security/027-mark-curphey-front.png b/public/cards/security/027-mark-curphey-front.png
diff --git a/public/cards/security/028-jeff-williams-back.png b/public/cards/security/028-jeff-williams-back.png
diff --git a/public/cards/security/028-jeff-williams-front.png b/public/cards/security/028-jeff-williams-front.png
diff --git a/public/cards/security/029-gary-mcgraw-back.png b/public/cards/security/029-gary-mcgraw-back.png
diff --git a/public/cards/security/029-gary-mcgraw-front.png b/public/cards/security/029-gary-mcgraw-front.png
diff --git a/public/cards/security/030-michael-howard-back.png b/public/cards/security/030-michael-howard-back.png
diff --git a/public/cards/security/030-michael-howard-front.png b/public/cards/security/030-michael-howard-front.png
diff --git a/public/cards/security/031-adam-shostack-back.png b/public/cards/security/031-adam-shostack-back.png
diff --git a/public/cards/security/031-adam-shostack-front.png b/public/cards/security/031-adam-shostack-front.png
diff --git a/public/cards/security/032-ivan-ristic-back.png b/public/cards/security/032-ivan-ristic-back.png
diff --git a/public/cards/security/032-ivan-ristic-front.png b/public/cards/security/032-ivan-ristic-front.png
diff --git a/public/cards/security/033-mark-dowd-back.png b/public/cards/security/033-mark-dowd-back.png
diff --git a/public/cards/security/033-mark-dowd-front.png b/public/cards/security/033-mark-dowd-front.png
diff --git a/public/cards/security/034-halvar-flake-back.png b/public/cards/security/034-halvar-flake-back.png
diff --git a/public/cards/security/034-halvar-flake-front.png b/public/cards/security/034-halvar-flake-front.png
diff --git a/public/cards/security/035-alex-sotirov-back.png b/public/cards/security/035-alex-sotirov-back.png
diff --git a/public/cards/security/035-alex-sotirov-front.png b/public/cards/security/035-alex-sotirov-front.png
diff --git a/public/cards/security/036-thomas-ptacek-back.png b/public/cards/security/036-thomas-ptacek-back.png
diff --git a/public/cards/security/036-thomas-ptacek-front.png b/public/cards/security/036-thomas-ptacek-front.png
diff --git a/public/cards/security/037-matthew-green-back.png b/public/cards/security/037-matthew-green-back.png
diff --git a/public/cards/security/037-matthew-green-front.png b/public/cards/security/037-matthew-green-front.png
diff --git a/public/cards/security/038-j-alex-halderman-back.png b/public/cards/security/038-j-alex-halderman-back.png
diff --git a/public/cards/security/038-j-alex-halderman-front.png b/public/cards/security/038-j-alex-halderman-front.png
diff --git a/public/cards/security/039-nadia-heninger-back.png b/public/cards/security/039-nadia-heninger-back.png
diff --git a/public/cards/security/039-nadia-heninger-front.png b/public/cards/security/039-nadia-heninger-front.png
diff --git a/public/cards/security/040-troy-hunt-back.png b/public/cards/security/040-troy-hunt-back.png
diff --git a/public/cards/security/040-troy-hunt-front.png b/public/cards/security/040-troy-hunt-front.png
diff --git a/public/cards/security/041-window-snyder-back.png b/public/cards/security/041-window-snyder-back.png
diff --git a/public/cards/security/041-window-snyder-front.png b/public/cards/security/041-window-snyder-front.png
diff --git a/public/cards/security/042-heather-adkins-back.png b/public/cards/security/042-heather-adkins-back.png
diff --git a/public/cards/security/042-heather-adkins-front.png b/public/cards/security/042-heather-adkins-front.png
diff --git a/public/cards/security/043-parisa-tabriz-back.png b/public/cards/security/043-parisa-tabriz-back.png
diff --git a/public/cards/security/043-parisa-tabriz-front.png b/public/cards/security/043-parisa-tabriz-front.png
diff --git a/public/cards/security/044-alex-stamos-back.png b/public/cards/security/044-alex-stamos-back.png
diff --git a/public/cards/security/044-alex-stamos-front.png b/public/cards/security/044-alex-stamos-front.png
diff --git a/public/cards/security/045-dan-geer-back.png b/public/cards/security/045-dan-geer-back.png
diff --git a/public/cards/security/045-dan-geer-front.png b/public/cards/security/045-dan-geer-front.png
diff --git a/public/cards/security/046-kevin-mandia-back.png b/public/cards/security/046-kevin-mandia-back.png
diff --git a/public/cards/security/046-kevin-mandia-front.png b/public/cards/security/046-kevin-mandia-front.png
diff --git a/public/cards/security/047-mikko-hypponen-back.png b/public/cards/security/047-mikko-hypponen-back.png
diff --git a/public/cards/security/047-mikko-hypponen-front.png b/public/cards/security/047-mikko-hypponen-front.png
diff --git a/public/cards/security/048-robert-m-lee-back.png b/public/cards/security/048-robert-m-lee-back.png
diff --git a/public/cards/security/048-robert-m-lee-front.png b/public/cards/security/048-robert-m-lee-front.png
diff --git a/public/cards/security/049-lesley-carhart-back.png b/public/cards/security/049-lesley-carhart-back.png
diff --git a/public/cards/security/049-lesley-carhart-front.png b/public/cards/security/049-lesley-carhart-front.png
diff --git a/public/cards/security/050-katie-nickels-back.png b/public/cards/security/050-katie-nickels-back.png
diff --git a/public/cards/security/050-katie-nickels-front.png b/public/cards/security/050-katie-nickels-front.png