A custom application-layer detection engine with file integrity monitoring, security event logging, Zero Trust-protected testing, and Git-based deployment.