Worked on the unbyytes/GCES repository to deliver comprehensive CSRF security documentation for Sprint 2, focusing on risk assessment, mitigation strategies, and learning outcomes. The documentation detailed how using authorization headers for authentication effectively prevents CSRF attacks that exploit cookies, clarifying the project’s defense-in-depth approach. Markdown was used to structure the documentation, ensuring clarity and accessibility for both developers and auditors. Project navigation was updated to expose Sprint 2 materials, improving discoverability and onboarding for new contributors. The work emphasized security research, documentation governance, and repository organization, providing clear traceability for future security reviews and ongoing development.