Expand description
Security engine — a deterministic candidate producer (bandit-style).
It emits syntactic candidates; it never decides exploitability (the
candidate/verifier split — RESEARCH.md §2.11). Maps parser SecurityHits to
findings with per-rule confidence.
Functions§
- analyze
- analyze_
parsed - Security findings for a single parsed module (also used by the live LSP path).