During December 2025, contributed to the matrix-org/complement repository by delivering two security-focused backend features using Go, Docker, and DevOps practices. Developed a transport protocol policy for the homeserver, enforcing HTTP for client traffic and HTTPS for federation traffic to enhance PKI compliance and security. Enabled device key uploads with one-time key verification, ensuring OTKs are signed by the corresponding device key and updating tests to validate this flow. Incorporated PKI setup references into Docker image requirements, improving deployment-time visibility and governance. Emphasized traceable, auditable changes and expanded test coverage to support incremental improvements in security posture and partner trust.