Security

Security & Static Analysis Findings

Findings from the Security Audit Agent. Severity and blocking status are always derived from the deterministic CWE/OWASP regex screen, never from LLM narrative text alone.